Answers.Body: <p>We have used the <a href="https://civicrm.org/extensions/relationship-permissions-acls" rel="nofollow noreferrer">Permissioned Relationship</a> extension to offer features that might work for you.</p>
  <p>By using Permissioned Relationships as the ACL it means you can</p>
  <ul>
  <li>add members to a local Group via a relationship</li>
  <li>add officers via a different relationship, to the local Group record (a civi contact)</li>
  <li>enable read/write access to those local members for the local Group officers</li>
  <li>connect the local Group to a regional group via a relationship, and let the permissions flow down, hence regional officers get a relationship to the regional record, and the Region gets a permissioned relationship to the local Group record, hence regional officers get to access members across all the connected local groups.</li>
  </ul>
  <p>I thought there was a lengthy blog about this but perhaps it disappeared during some upgrade. There is a review of it <a href="https://civicrm.org/blog/erikhommel/review-of-extension-relationship-permissions-as-acls" rel="nofollow noreferrer">here</a>.</p>
  <p>While 'old' it is still an effective solution for these types of needs. Along with standard Civi permissions you can finesse what the permissioned contacts can actually do.</p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2024-09-09T19:15:18.073Z
Answers.LastActivityDate: 2024-09-09T19:15:18.073Z
Answers.UserDisplayName: petednz - fuzion
Answers.Body: <p>Yes, absolutely possible</p>
  <p>Most of this is via CiviCRM so it shouldn't make too much difference which CMS you're using (Drupal/Wordpress/Joomla etc).</p>
  <p>Take a look at this section of the user manuals</p>
  <p><a href="https://docs.civicrm.org/user/en/latest/initial-set-up/permissions-and-access-control/" rel="nofollow noreferrer">https://docs.civicrm.org/user/en/latest/initial-set-up/permissions-and-access-control/</a></p>
  <p>ACL's (Access Control Lists) is the area of CiviCRM configuration you'll be using. They allow you to control who see's what in effect and control data access i.e. regional secretaries in the London Region can only access members of the London Members Group. And then each borough maybe a child group for example with access control in the same way but this time for branch seceraties. You can have multiple roles all forming the ACL and you can allow people to be in more than one and therefore have access to more data/contacts.</p>
  <p>Hope that helps!</p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2024-09-09T10:47:43.177Z
Answers.LastActivityDate: 2024-09-09T10:47:43.177Z
Answers.UserDisplayName: Parvez Saleh
Body: <p>An NGO I'm helping to is trying to create multi-level access to their resources. Is it possible to create a sytem, where there are local groups, regional groups and national groups? I'd like to add option that local group leaders only see contacts from their own 'suborganisation', and regional roles only see the own region including certain local groups, etc.
  Would that be possible? I found only 8 years old answers, and they were not clear :(</p>
  
Tags: <groups><roles>
Title: Multi Level Access
ThreadText: # Multi Level Access
  
  (Asked by: username_0 on 2024-09-09)
  
  An NGO I'm helping to is trying to create multi-level access to their resources. Is it possible to create a sytem, where there are local groups, regional groups and national groups? I'd like to add option that local group leaders only see contacts from their own 'suborganisation', and regional roles only see the own region including certain local groups, etc.
  Would that be possible? I found only 8 years old answers, and they were not clear :(
  
  **Tags:** groups, roles
  
  
  ---
  
  ## 2 answers
  
  ### Answer by username_1 on 2024-09-09. Score: 1
  
  We have used the [Permissioned Relationship](https://civicrm.org/extensions/relationship-permissions-acls) extension to offer features that might work for you.
  
  By using Permissioned Relationships as the ACL it means you can
  
  * add members to a local Group via a relationship
  * add officers via a different relationship, to the local Group record (a civi contact)
  * enable read/write access to those local members for the local Group officers
  * connect the local Group to a regional group via a relationship, and let the permissions flow down, hence regional officers get a relationship to the regional record, and the Region gets a permissioned relationship to the local Group record, hence regional officers get to access members across all the connected local groups.
  
  I thought there was a lengthy blog about this but perhaps it disappeared during some upgrade. There is a review of it [here](https://civicrm.org/blog/erikhommel/review-of-extension-relationship-permissions-as-acls).
  
  While 'old' it is still an effective solution for these types of needs. Along with standard Civi permissions you can finesse what the permissioned contacts can actually do.
  
  
  ---
  
  ### Answer by username_2 on 2024-09-09. Score: 1
  
  Yes, absolutely possible
  
  Most of this is via CiviCRM so it shouldn't make too much difference which CMS you're using (Drupal/Wordpress/Joomla etc).
  
  Take a look at this section of the user manuals
  
  <https://docs.civicrm.org/user/en/latest/initial-set-up/permissions-and-access-control/>
  
  ACL's (Access Control Lists) is the area of CiviCRM configuration you'll be using. They allow you to control who see's what in effect and control data access i.e. regional secretaries in the London Region can only access members of the London Members Group. And then each borough maybe a child group for example with access control in the same way but this time for branch seceraties. You can have multiple roles all forming the ACL and you can allow people to be in more than one and therefore have access to more data/contacts.
  
  Hope that helps!
  
  
  ---
  
  