We would like to have one of our users act as a system admin with the privileges to make configuration changes - entities, fields, layouts, workflows etc. However in order to comply with GDPR regulations it is important that this user cannot have any access to certain data elements - for example an employee record that might contain personal information. So our request is to be able to limit the data access of an admin user (and not allow that user to change their own data access!)
-
-
Hi Dave,
Unfortunately, it is not feasible (at least without a super big overhaul). A user that can manage workflows, BPM, formula, etc., even if they were not admin, they can just make themselves admin using the available tools. Or just extract data using these tools. It would have been a bogus feature, that we would need to acknowledge as such otherwise, we would just get tons unfixable security reports.
Comment