Tenant-based permissions in WFM Config Utility?

[emma]

Hi everyone,

I am attempting to restrict a user to accessing only one tenant in WFM Config Utility with no luck.

The user only has permission to read and execute a single tenant, and has been specifically added to permissions with no access to all other tenants, switches, virtual switching offices and has been removed from every access group except the new one being used to provide this access, yet they can still view and access all tenants/switches in the config utility. The user is also able to view all tenants/switches in WFM, not just the config utility.

Surely there is a way to restrict the user to only be able to view and modify a single tenant? I hope I am doing something silly here.

[Steve]

The only way to restrict WFM permissions in in the Security options of WFM itself.
You could create business units to match each tenant and then use these to limit access.

[emma]

Thanks Steve.

We found the missing piece of the puzzle, restricting access to individual users in the user security options WFM.

I'll check out the business units, this will be much cleaner than modifying every user.