Picture of Rule Groups in Access Permissions | Example Scenario 3 | BG_AP_006

Rule Groups in Access Permissions | Example Scenario 3 | BG_AP_006

In this video, you'll learn about the powerful yet underutilized feature in Infigo: rule groups. Rule groups are essential for managing complex access scenarios, especially when you need to apply multiple, potentially conflicting restrictions, such as location and role-based access to products. The tutorial walks you through the process of setting up rule groups, explaining how they can simplify the management of intricate access rules by allowing you to evaluate them independently. This feature is particularly useful for those dealing with complex storefront configurations, ensuring that the right users have access to the right products while maintaining a streamlined rule management process.

Tutorial Video Transcript

A transcript of our tutorial video, ensuring you can find exactly what you need, when you need it.

You can search this page to find the relevant time-stamp in the video. Also, this text can be used as part of the tutorial search feature.

00:00:05:23 - 00:00:06:06
Okay.

00:00:06:06 - 00:00:10:07
So the third scenario we've got here
is something called rule groups.

00:00:10:21 - 00:00:14:18
Now this is something
which is very much under use to be honest.

00:00:14:18 - 00:00:18:01
It's something which is quite
a powerful bit of functionality.

00:00:18:01 - 00:00:22:00
If you've got quite complex access
scenarios that you need to consider.

00:00:22:17 - 00:00:25:21
It's just a case of getting your head
around exactly what it can do.

00:00:25:26 - 00:00:28:26
So hopefully I'll help you with that.

00:00:31:18 - 00:00:34:04
So again, a different scenario.

00:00:34:04 - 00:00:39:04
Our scenario here
is that we have a set of products

00:00:39:24 - 00:00:42:24
for the access to those products or

00:00:42:27 - 00:00:45:20
conditions on
those products is going to vary.

00:00:45:20 - 00:00:48:20
So some of the products may be location
restricted.

00:00:49:01 - 00:00:51:11
Some of the products may be role
restricted.

00:00:51:11 - 00:00:54:11
So only accessible by sales or marketing.

00:00:54:24 - 00:00:57:12
Some of them might not be restricted
at all.

00:00:57:12 - 00:00:59:15
And some of them
might have restrictions for both.

00:00:59:15 - 00:01:02:15
So they might be both role
and location restricted.

00:01:03:01 - 00:01:06:16
And what we've got to try and establish in
this scenario

00:01:07:01 - 00:01:11:13
is an effective system of governing
these potentially complex situations.

00:01:12:11 - 00:01:15:06
So what we're going to do in this
scenario is aim to introduce

00:01:15:06 - 00:01:18:06
the concept of rule groups for simplifying

00:01:18:11 - 00:01:21:06
this complex access requirements scenario.

00:01:22:29 - 00:01:25:29
So what we've got is three products.

00:01:25:29 - 00:01:29:00
The information below the product shows
the restrictions that are on it.

00:01:29:00 - 00:01:31:29
So product one is location
restricted only.

00:01:31:29 - 00:01:34:29
Product two is location and department.

00:01:35:02 - 00:01:38:02
And then product three
has no restrictions at all.

00:01:40:07 - 00:01:41:06
And then our customers

00:01:41:06 - 00:01:44:12
are just different locations
and different departments.

00:01:44:12 - 00:01:47:12
Just for clarity.

00:01:50:25 - 00:01:51:15
Okay.

00:01:51:15 - 00:01:54:19
So due to the complexities
of these multiple

00:01:54:19 - 00:01:57:19
and potentially conflicting restrictions,

00:01:57:25 - 00:02:01:24
creating a fully working
set of rules using just the standard

00:02:01:24 - 00:02:05:11
method of weightings
and granting and denying access,

00:02:05:29 - 00:02:09:18
it's going to either
be very, very difficult.

00:02:09:18 - 00:02:11:11
So we'll give you a really big headache

00:02:11:11 - 00:02:14:11
or in some cases,
it might actually be impossible to do.

00:02:14:26 - 00:02:16:22
So. This is what access know.

00:02:16:22 - 00:02:20:09
This is what role groups, rule groups
try and allow you to do.

00:02:20:09 - 00:02:22:21
Really simplify this process.

00:02:22:21 - 00:02:25:15
Now of course,
with our example of three products and six

00:02:25:15 - 00:02:28:19
customers, it's fairly straightforward,
but hopefully it will

00:02:29:21 - 00:02:32:21
put the methodology across to.

00:02:34:21 - 00:02:37:00
Okay, so the visuals are getting a bit

00:02:37:00 - 00:02:40:05
more confusing,
but let me try and simplify this.

00:02:40:21 - 00:02:44:24
So what we've got in our example here is

00:02:46:12 - 00:02:48:09
rules governing this scenario

00:02:48:09 - 00:02:51:09
divided into two separate rule groups.

00:02:51:18 - 00:02:52:19
And those rule groups.

00:02:52:19 - 00:02:57:21
One is to do with shipping restrictions
and one is to do with roll restrictions.

00:02:58:23 - 00:03:02:18
Now, within each of those groups,
we've got a few different rules

00:03:02:18 - 00:03:05:18
of different weightings
which govern these scenarios.

00:03:05:23 - 00:03:10:10
So the higher weighted rules
grant access to individual options

00:03:10:11 - 00:03:14:09
of that restriction, such as if it's
a particular country that has access

00:03:15:06 - 00:03:18:06
or if it's a particular
department has access.

00:03:18:12 - 00:03:21:23
And then we've got a lower
weighted rule in each one, which denies

00:03:21:23 - 00:03:25:23
access to all of the other products
which weren't covered in the first rule.

00:03:26:24 - 00:03:29:14
Hopefully this will make more sense
as I start going through the slides.

00:03:29:14 - 00:03:32:14
So do bear with me.

00:03:35:04 - 00:03:37:24
Now, the first thing we're looking at here
is the default access.

00:03:37:24 - 00:03:40:18
As is always
the case, default access is king.

00:03:40:18 - 00:03:43:18
That's going to be in place
before there's any rules in place.

00:03:44:04 - 00:03:47:04
In this scenario,
default access is granted

00:03:47:11 - 00:03:51:06
so every product can be accessed
by every customer.

00:03:51:15 - 00:03:53:19
There's no restrictions in place
initially.

00:03:53:19 - 00:03:56:19
Everyone can access everything.

00:03:58:13 - 00:04:02:01
Then we start evaluating
rule groups individually.

00:04:02:01 - 00:04:03:21
So this is the main benefit of them.

00:04:03:21 - 00:04:06:22
It actually allows you to separate
the rules into different sections.

00:04:07:00 - 00:04:09:16
So you don't have to have them competing
with one another.

00:04:09:16 - 00:04:12:05
Basically, you don't have to really,

00:04:12:05 - 00:04:16:03
do weird and wonderful things
with the weightings.

00:04:16:03 - 00:04:20:11
And once you get it work, you can get them
to evaluate independently.

00:04:21:13 - 00:04:22:23
So what we've got in this example

00:04:22:23 - 00:04:26:11
here is we're seeing
who has access to product one.

00:04:27:03 - 00:04:29:26
Now product one is only restricted

00:04:29:26 - 00:04:32:26
by shipping,
is only restricted by location.

00:04:33:06 - 00:04:34:03
And we can see the product.

00:04:34:03 - 00:04:36:06
One is for us customers.

00:04:36:06 - 00:04:39:06
I want.

00:04:39:09 - 00:04:40:24
So what this means if we start off

00:04:40:24 - 00:04:43:24
just by looking at the shipping
restrictions rule group, first of all,

00:04:45:04 - 00:04:47:08
two of the rules that are within that

00:04:47:08 - 00:04:50:08
scenario apply because it's us only.

00:04:50:17 - 00:04:52:16
So it matches that one.

00:04:52:16 - 00:04:55:04
And it does have shipping
restrictions apply.

00:04:55:04 - 00:04:57:07
So it matches that one as well.

00:04:57:07 - 00:05:00:07
Canada only is not relevant
as we saw before.

00:05:00:07 - 00:05:03:07
That rule does not apply,
so we don't consider it.

00:05:05:17 - 00:05:07:03
And what this means

00:05:07:03 - 00:05:09:28
as we're going through that rule group,

00:05:09:28 - 00:05:13:29
once we exit this we've got two customers
which have access to product one.

00:05:14:13 - 00:05:19:05
So the US sales and the US marketing
will be able to access product one

00:05:19:28 - 00:05:22:25
because they were applicable to this rule
here, which is higher weighting.

00:05:23:27 - 00:05:25:18
The other customers

00:05:25:18 - 00:05:30:23
will all have a defined denied access
to that particular product

00:05:31:11 - 00:05:34:21
in that scenario, because the second rule
that we've gone through here

00:05:35:02 - 00:05:38:00
has denied access
to everything that wasn't covered

00:05:38:00 - 00:05:41:00
in the first one.

00:05:43:27 - 00:05:45:06
Now, remember that we

00:05:45:06 - 00:05:48:06
we look at the rule groups independently.

00:05:48:06 - 00:05:52:04
So we could also do the second rule
group as well, which is role restrictions.

00:05:52:21 - 00:05:55:21
In this case,
none of the roll restriction rules

00:05:55:21 - 00:05:58:21
apply because it doesn't have a department
assigned.

00:05:58:23 - 00:06:00:28
It's not sales, it's not marketing.

00:06:00:28 - 00:06:02:17
So it doesn't matter.

00:06:02:17 - 00:06:06:02
So even though we're looking
at the rule groups independently

00:06:06:09 - 00:06:10:09
in this particular example, it's only
relying on that one particular rule group.

00:06:10:18 - 00:06:13:14
So we've got access granted to customers

00:06:13:14 - 00:06:16:14
and denied to the rest.

00:06:20:14 - 00:06:21:15
Now this is where it gets fun.

00:06:23:10 - 00:06:24:24
Product two.

00:06:24:24 - 00:06:28:27
Product two has restrictions
for both shipping and role.

00:06:29:10 - 00:06:31:03
So this is where we need to consider

00:06:31:03 - 00:06:34:13
both of those rule groups and evaluate
both of those rule groups.

00:06:35:02 - 00:06:38:00
So what we can see here is that

00:06:38:00 - 00:06:41:00
we've gone through a rule group,
one that will, in its own,

00:06:41:06 - 00:06:45:29
with its own set of rules, will grant
and deny access to certain customers.

00:06:46:20 - 00:06:49:21
And then the second rule group
will also have its own results.

00:06:49:21 - 00:06:52:21
So that will grant and deny access
to certain customers.

00:06:53:15 - 00:06:55:12
If we're utilizing multiple rule

00:06:55:12 - 00:07:00:13
groups, you only get access
if you've got an agreement

00:07:00:13 - 00:07:03:13
from all of the rule groups
that are involved in this scenario.

00:07:03:22 - 00:07:06:07
So what we can see
as a result of these two individual

00:07:06:07 - 00:07:09:07
rule groups is only one user.

00:07:09:20 - 00:07:12:20
Only one customer has been granted access
to product two,

00:07:12:24 - 00:07:16:20
because that's the only user
on which the two rule groups can agree.

00:07:17:27 - 00:07:19:20
Hopefully that makes sense.

00:07:19:20 - 00:07:22:20
So both of those rule groups
have granted access to this customer.

00:07:23:27 - 00:07:26:27
Some of the rule groups
have both denied access.

00:07:27:07 - 00:07:29:27
So that's pretty straightforward
to calculate.

00:07:29:27 - 00:07:32:27
Some of them have been giving mixed
responses.

00:07:33:09 - 00:07:37:02
So let's say US marketing for example,
the customer US marketing,

00:07:38:07 - 00:07:41:07
the shipping restrictions
rule group has granted access.

00:07:42:00 - 00:07:45:00
The rule restrictions
rule group has denied access.

00:07:45:00 - 00:07:48:03
And because you've got
a mixed feedback on that, ultimately,

00:07:48:03 - 00:07:51:03
it denies access.

00:07:52:00 - 00:07:55:03
So hopefully
that's starting to make sense.

00:07:55:03 - 00:07:58:17
But you can see there how instead of
really complex scenario of rules,

00:07:58:27 - 00:08:02:03
you can break it down
into just a few rule groups

00:08:02:03 - 00:08:05:03
which are acted upon in isolation.

00:08:08:22 - 00:08:11:07
And then just to rounded off,
we've got product three.

00:08:11:07 - 00:08:14:20
Product
three has no restrictions whatsoever.

00:08:14:29 - 00:08:19:05
So what that means is that we
are just defaulting to the default access

00:08:19:05 - 00:08:22:01
because none of the rule groups
are registered to replied.

00:08:22:01 - 00:08:24:19
So every customer will be
able to access product three.

00:08:30:12 - 00:08:32:27
And again you've got this storefront
as an example.

00:08:32:27 - 00:08:36:05
So the scenario three storefronts,
you want to go and take a look at how

00:08:36:05 - 00:08:39:05
that's been set up and configured.

00:08:43:09 - 00:08:43:19
Okay.

00:08:43:19 - 00:08:47:13
So I'll just show you quickly
how you actually create and utilize

00:08:47:18 - 00:08:48:22
the rule group.

00:08:48:22 - 00:08:50:15
It's really, really easy to be honest.

00:08:50:15 - 00:08:53:15
You know, in terms of setting up
how to utilize it.

00:08:54:26 - 00:08:57:26
So I'm just going to go to one of my.

00:08:59:02 - 00:09:02:02
Sample storefronts.

00:09:03:02 - 00:09:06:02
And then go to my access permissions.

00:09:11:25 - 00:09:15:16
So the vast majority of the situation here
is exactly the same

00:09:15:16 - 00:09:16:26
as we've already seen.

00:09:16:26 - 00:09:18:14
You're still creating scopes,

00:09:18:14 - 00:09:21:14
you're still creating targets
to create the rules.

00:09:21:21 - 00:09:26:09
All we're doing, in addition, is assigning
those rules to a particular rule group.

00:09:26:23 - 00:09:28:21
And the rule group
is essentially just a folder.

00:09:29:29 - 00:09:33:10
So let me add a.

00:09:36:04 - 00:09:38:24
Second scope.

00:09:38:24 - 00:09:41:24
Just as an example.

00:09:43:21 - 00:09:46:21
Second target.

00:09:51:22 - 00:09:54:22
And then you see the third
tab along is our rule groups.

00:09:55:03 - 00:09:58:03
And all you need to do in here is say
add new record

00:09:59:02 - 00:10:00:02
and assign a name.

00:10:00:02 - 00:10:03:02
That's it.

00:10:09:18 - 00:10:11:00
Then when you go across

00:10:11:00 - 00:10:14:00
and are utilizing your access
permission screen,

00:10:14:15 - 00:10:18:06
when you're generating your rules,
all you need to do is to actually select

00:10:18:06 - 00:10:21:06
the group that you want
those to be contained within.

00:10:21:18 - 00:10:23:05
And that's it.

00:10:23:05 - 00:10:26:05
So if I go to add new record
to create a new rule,

00:10:27:06 - 00:10:30:06
I can select the scope.

00:10:30:15 - 00:10:33:15
Select the target
and then define the group

00:10:34:04 - 00:10:37:09
I will not to been
oh I'm not saved it presumably

00:10:37:09 - 00:10:40:09
or it's not updated.

00:10:45:20 - 00:10:48:20
There we go.

00:10:51:18 - 00:10:54:10
Then the waiting and the access works
the same way.

00:10:54:10 - 00:10:57:06
It's just going to be contained
to the rules within that particular group.

 

Incomplete
Step by Step Guide
Search Terms

Individual Search Words

restrictions, rule-groups, folders, scenarios, isolation, conditions, locations, departments, users, categories

Alternate Search Phrases

manage rule-based access, create rule groups, define access restrictions, set location-based permissions, assign department restrictions, configure access scenarios, establish rule-based control, manage complex access rules, apply access conditions, organize rules by group