Subsidiaries & groups
A subsidiary is a legal entity you close the books for. This page covers who can see which subsidiaries, and how to manage them at scale with subsidiary groups. Manage subsidiaries on the Admin → Subsidiaries page.
Who sees what
Admins and System Admins always have access to all subsidiaries. For everyone else, access is controlled per user (or per group).
Default deny or default allow
You can configure whether new users get access to all subsidiaries or none by default. This is set for you at setup. Contact CloseCore to change it.
Viewing access
To see which users can access each subsidiary, open the Subsidiaries page and click the icon in the Users column for that subsidiary.
Subsidiary groups
If you have many subsidiaries, assigning access one entity at a time is tedious and error-prone. Instead, create subsidiary groups on the Subsidiaries page and grant users access by group.
On the Users page you can then assign a user any mix of subsidiary groups and individual subsidiaries. Groups have an added benefit for users: they can view tasks across all subsidiaries in the group at once.
Delegated subsidiary access
Users with Manage subsidiary access can edit access for eligible users whose role permissions are within their own. They cannot edit their own access or the access of users who manage access.
A delegate can grant individual subsidiaries they can access, or groups they hold. Seeing all current subsidiaries in a group does not give permission to grant that group, because its membership can change. Only someone with unrestricted access, or an access administrator, can grant All Subsidiaries.
Access outside a delegate's authority is retained. A locked group can continue to grant access even after a delegate removes an overlapping individual subsidiary. Users with unrestricted access cannot be scoped by a delegate whose access is limited.
Moving subsidiaries between access groups requires Manage subsidiaries and either unrestricted subsidiary access or Administer access and roles.
Primary subsidiary
When several subsidiaries share the same root folder, you can designate a primary subsidiary. Selecting the primary subsidiary in the Subsidiary Selector then shows tasks across all the subsidiaries that share the folder. By default, CloseCore shows tasks only for the single selected subsidiary. See Setting up a workflow.
Replacing a subsidiary's Root Folder
Open the subsidiary's cloud storage settings, expand Root folder actions, and choose Unlink root folder to review whether its existing work permits unlinking. After unlinking, select the replacement root in the same settings. See Unlinking or replacing a Root Folder for the records that block the action and what is retained.
If the departing subsidiary is primary for a shared root, select an active remaining subsidiary as its replacement. If no active subsidiary remains, the primary designation is cleared.
Related
- Roles & permissions: a role can be scoped to specific subsidiaries.
- Restricted folders: limit access below the subsidiary level.