Group inheritance and departments

The only thing that I can think of is to use dynamic roles

Hi Troy, thanks! I thought of that , too. Only thing is the configuration involved and the extra computing load on the database. But I guess there's no other way for me out of this :)

Regards!

Another idea (if the number of dyn roles would be "too large" ) would be to have the tree twice in the system. First with the rights which should be the inherited ones and a second with the non inheritance. Now only make the non inheritance tree delegable and take care (e.g. via a synch project) that the main employees get into both trees.

Thanks, Thorsten... I'll take that into account. Keeping two organizational tree would need also checking the web portals, so only the right "branches" would be offered to the final user (local admins). But the idea could help me out with some other tasks I need to cover , nonetheless. Thanks a lot!

I think we need to dig deeper into what triggers the inheritance and control how it acts.

Thanks again for your ideas. Have a nice weekend!

Thanks, Thorsten... I'll take that into account. Keeping two organizational tree would need also checking the web portals, so only the right "branches" would be offered to the final user (local admins). But the idea could help me out with some other tasks I need to cover , nonetheless. Thanks a lot!

I think we need to dig deeper into what triggers the inheritance and control how it acts.

Thanks again for your ideas. Have a nice weekend!