Is there a way to make one specific Site read-only for a set of users (blocking changes to things like Inventory Transactions, Customer Orders, and Work Orders at that Site specifically) without having to manually recreate every permission set, when all sites currently share the same permission sets?

All FAQ questions / Security and access

Answer

There's no direct, built-in way to make a single Site read-only for otherwise-transacting users — permission sets aren't scoped per Site out of the box (this kind of row-level, Site-scoped restriction isn't a standard feature). A working custom approach: create a dedicated read-only EU Role (using the 'Permission sets by Component' tab and granting Query All on each relevant component, rather than rebuilding every screen's rights manually), connect that role to the users who should get Site-scoped read-only access, and then add a Custom Event on the relevant Logical Units (Customer Order, Work Order, Inventory Transaction, etc.) that raises an error blocking the change whenever the transaction's Site matches the restricted Site AND the current user is connected to that specific read-only EU Role — effectively converting the block into a targeted, role-driven condition rather than a wholesale permission rebuild.

Documentation-based answer. Confirm the product and release before applying it. This answer has not been verified in an IFS environment.

← Browse Security and access questions