The information you hold in your OpenCRM system is your 'crown jewels' and you need the tools to be able to lock them up tight. Maintain a secure and consistent approach when accessing your data, give users the security levels that apply to them, giving access to data that is important for them to work and minimising the need to give permissions for areas that should be secure. Limit the ability to export data and hide field values that do not apply to a specific user, plus a great deal more.
All OpenCRM systems are implemented with your own 'system administrator' user so that you can create users, permissions, change fields and values and carry out a myriad of other configuration options. Administrators can assign and set up security, based around Profiles, Groups and Record level. Configuring system wide parameters is easy with functions available for you to tailor user access to determine what information and which parts of the system a user can access.
Configuration Administrators can make system wide changes, adding custom fields, email templates, lookup values and much more.
Data Administrators get access to all of the data features in OpenCRM but are restricted from making configuration changes giving you an easy way to allow someone full visibility of the data within your system, without opening up access to the more 'technical' features. Remember, you decide who gets which levels of access and which areas users can see and what elements they can change or use.
Record level restrictions can be applied to enforce company policy on account management including the ability to specify if users should be given 'Public Read', 'Public Read, Create/Edit', 'Public Read, Create/Edit, Delete', 'Private', 'Private Group Read, Create/Edit, Delete' attributes and 'Global Read, Create/Edit and delete' attributes.