A Business Unit models a division in your business. e.g. Web Application Team, Angry Birds Division, etc.
The primary function of a Business Unit is to segregate users and projects. Each user can belong to any number of Business Units. Being in a Business Unit (without any other permissions) grants users the ability to view all applications (but not the projects) in the Business Unit. In addition, only users in the business unit can be added to projects within the business unit.
When creating a business unit, there is an option to open up the business unit to all users of the SDE application within the organization or only a select few users.
In the picture above, we have created a business unit that only has Alice, Bob, Carol, and the group Delta123 as its members. Note that by adding Delta123, you are also granting the business unit membership to any sub-groups within Delta123. This allows a simpler mechanism to manage your user groups and also finer grained control should you need it.
In the picture above, we have created a business unit that is open to all members within the organization. Anyone with an account will be able to view the applications within the business unit. However, they will only have access to the project details of projects that they are explicitly added to.
In addition, when creating a business unit, you have the option to set certain users and groups as Default Members for Projects. This will automatically add them as members of any projects within the business unit created from then on. When creating the project, these members will automatically show up in the Members field and you will have the option to remove them before saving the project should you wish to exclude some users from that project.
There are two permissions associated with Business Units: create business unit and delete business unit. Having either of them grants the user the ability to see all business units. However, they will need to have the create business unit and delete business unit to create or delete business units respectively.
If the administrator requires additional permissions (e.g. to manage projects and users within the business unit), they will need to be given the appropriate permissions. The other permissions only function within the context of the business units the administrator is a part of. We will explain this with a number of examples:
- Alice is the administrator of the SDE Application, she needs to be able to create/delete business units but she should not be privy to the project details of the various business units in the corporation. She should have create business unit and delete business unit permissions. This gives her access to see all the business units within the organization and all the application names but not the projects within them.
- Bob is a technical director in the Internal Tools Division. He needs to be able to see and edit all the project details in every project within the Internal Tools Business Unit. He should be added to the Internal Tools Business Unit as a member and granted admin all projects permission. This does not give Bob access to any other project in other business units.
- Carol is a project manager in Divisions A, B, and C. She needs to be able to view all the details of the projects in all three business units but she should not be able to edit any of the details of the projects. She should be added as a member of all three business units and be granted view all projects permission. She will not have access to other business units' projects.
- David is the CEO of the company. He should be able to do anything he wants to in any project within the company. He should be granted create business unit and delete business unit permission to allow him access to all business units and admin all projects permission to grant him administrative privileges across all the business units he has access to.
- Eve is a programmer who works on projects in the Internal Tools Division and the Web Application Division. She needs to be able to edit the project details in projects of both business units. She needs to be added to both business units and any projects she is working on.