Restricting access to a project by business unit

Introduction
This article explains how to control access to projects within IriusRisk based on a user's business unit (BU). This can be helpful for organizations with multiple business units working on separate projects, ensuring users only see information relevant to their responsibilities.

Use Case

Your company has separate business units for the Development and Security teams. You want to create a project for a new application but don't want one of the teams to see it in their project list. By restricting access by business units, you can control project visibility and maintain data security.

Steps

• Manage Business Units and User Assignments:

  - You'll need administrative access to manage business units. Create separate BUs for each department or team within your organization
  - Ensure each user is assigned to their appropriate business unit
  
  

• Assign Business Units to Projects:

  - Open the specific project you want to restrict access to
  - Locate the "Ownership" tab
  
  - Add the relevant business unit(s) to the project and press save. This associates the project with those specific business units
  
  
  

• Adjust User Permissions:

  - Locate the role assigned to your users and edit its permissions.
  - Look for the permissions "PRODUCTS_LIST_ALL" & "PRODUCTS_LIST_ALL_READ_ONLY." Uncheck these permissions to prevent users from seeing a complete list of all projects.

Conclusion

Restricting project access by business unit provides a simple and effective way to manage project visibility within IriusRisk. By following these steps, you can ensure users have the access they need while maintaining data security and a focused user experience.