Expand my Community achievements bar.

The next phase for Workfront Community ideas is coming soon. Learn all about it in our blog!

Enable "Admin View Access" in Access Levels

Avatar

Community Advisor

3/28/23

Description
Allow us to create Access Levels that have the same benefit of an Administrator by granting them View access to all records across the instance, but allows us to limit their ability to modify, create, or delete records.

Why is this feature important to you
We have a number of accounts that are designated as service accounts. To protect our data from being inadvertently modified or deleted, we have to create a custom view-only Access Level that allows the service account to read records but not modify, create, or delete records. This means we have to spend a lot of time ensuring these service accounts are shared on all the relevant records in our instance. It would save a lot of time and energy if we could create Access Levels that allow an account unlimited read access, but limited write/delete access.

How would you like the feature to work
Enable an option on the Access Level editor to grant "Admin View Access" which would allows accounts using that Access Level to view/read any record in the instance while still allowing us to customize which objects the Access Level can create, modify, or delete.

Current Behaviour
We cannot assign the Administrator Access Level to our service accounts without accepting the risk that those accounts may overwrite or delete data. We therefore create view-only Access Levels to assign, then spend a lot of time and energy making sure the service accounts are shared on everything. The ability for us to create a "view-only with admin rights" account would be safer and easier for us to manage.