Hi,There are 2 issues with your config: - user is member of "standard users" group which will give access to "all" organizational unit. Remove the user from there - for your other profile, the name is wrong thus it won't map to ACS security group and justbignore it. You need same prefix as "standard...

Ok, if that's the case the indeed no custom resource needed.Please check: * User Access is defined on Security Group and links to the relevant org Unit* use is part of security group and not member of other security groups with different user access* Acces authorization is set on the program and all...

At the end it depends on what objects you want to limit.Items like Campaigns or workflows can be limited without creating custom resources.If you want to limit user profiles though then you need to create a custom resource as by default it does not have the fields for access authorization.

No, this is not product profile.If you want to limit people of seeing all recipient profiles, you need to create a resource extnsion of ACSprofile data type. I.e. Administration - Development- Custom Resources

Yes, you have to change it to AND ti get it working.The rules is like NOT(A or B or C) and that translates to. NOT A and NOT b AND NOT c.Factor out rules applied

Which SDK version are you using?NL_TRACK_RECEIVE should have been added in 1.0.25 version for iOS if I remember correctly.

The field country is a linked object (nms:country) to the recipient.Link condition is the  location/@countryCode  which is supposed to contain the ISO2 country code defined in the country table.i.e. you need to set the country code within the Update Data activity.

Hi RIchard,indeed the "easiest" way would be to handle the Tracking Logs and check for users clicking on the link.Even if the opt-in always creates a new delivery, you should be able to identify that:either by checking the delivery nameOR even easier if you assign a unique URL Label to the link and ...

Hi Eveline,yes, that is exactly the issue.If the user is in any security group with all assigned, he will have access to anything in the whole system.That can't be limited by another security group.Following documentation states which organizational unit will be taken if multiple are assigned:Adobe ...

Hi Eveline,yes, I got this running.Just quickly listing steps required for you to check:Create org unitExtend profile resourceAssign org unit to profileCreate new security groupAssign organizational unit to security group in "User Access" sectionFrom your description, I would guess that 5. is missin...