Using instance level access control

You can use instance level access control to control what data the BlackBerry® Pushcast™ Software can process. When BlackBerry Pushcast Software users access a certain function in the BlackBerry Pushcast Software through their role assignment (for example, Run Report A), instance level access control determines what data the function can process.

The security framework for the BlackBerry Pushcast Software identifies the following data that instance level access control administers:
  • users and groups (including content assignments and progress data)
  • roles and permissions
  • content

Instance level access control only permits you to assign permissions to data that are less than or equal to what they are currently assigned. For example, your organization has three user groups defined as Group 1, Group 2, and Group 3. You assign the Administrator role to User A so that User A can manage Group 1 and Group 2. User A cannot assign the management of Group 3 to User B because User A has permission to manage Group 1 and Group 2 only.

Previous topic: Using RBAC

Was this information helpful? Send us your comments.