Why User A as sales in Team A, could see all Leads data of Team A?

[qibo101]

I have a question would like to ask the technical experts in the forum:
1. Team A and Team B are set up in the EspoCRM system.
2. User A and User B are both in Team A.
3. User A is assigned the Sales role, and User B is assigned the Manager role.
4. In the Sales role's ScopeLeave, the "Leads" field only shows their own data, while in the Manager role's ScopeLeave, the "Leads" field shows the team's data.

However, why is it that after logging in as Sales User A, User A can still see all Leads data of Team A(shouldn't only see his own data?).

[victor]

In your previous topic https://forum.espocrm.com/forum/gene...157#post120157, I explained how to check the current permissions of a specific User.
From your screenshots, you can see that both Users are members of Team A, which combines the Roles "Manager" and "Sales".

Additional Teams or Roles in a User's profile only expand permissions, not restrict them.
More about Roles and Teams: https://docs.espocrm.com/administrat...es-management/.

[qibo101]

Thank you for your guidance
delete the "Manager" role in Team A, and then the "Sales" User A can only see his own data.