Business Group Security When Impersonating People

Business Group Security applies to situations in which Business Group Administrators
need to impersonate people (that either currently belong to the administrator’s business group, or have belonged to the group in the past).

To illustrate how Business Group Security works when attempting to impersonate people,
consider the following scenarios involving Business Groups A and B with Business
Group Administrators A and B respectively:

• A Business Group Administrator of Business Group A attempts to impersonate a
person that belongs to Business Group A.

The Business Group Administrator is able to view all Person records that belong to
Business Group A (using the Organization > People area), and is able to impersonate
the person.

• A Business Group Administrator of Business Group A wants to impersonate a person
that belongs to Business Group B.

The Business Group Administrator is able to view all Person records that belong to
Business Group A (using the Organization > People area), but is unable to impersonate
people that belong to another business group.

• A Business Group Administrator of Business Group A wants to impersonate a person
that belonged to Business Group A in the past (but now belongs to Business Group B).

The Business Group Administrator is able to view all Person records that belonged
to Business Group A in the past (and belongs to Business Group B currently). But if
the Business Group Administrator (of Business Group A) selects the latest version of
the person (which belongs to Business Group B), Incent displays a message and
disables the Impersonate User button.

Business Group Administrator is, however, able to impersonate the earlier version
of the person (when the person belonged to Business Group A).

• A Business Group Administrator of Business Group B wants to impersonate a person
that belonged to Business Group A in the past, but now belongs to Business Group B.
The Business Group Administrator is able to view the Person record that belonged
to Business Group A in the past (and belongs to Business Group B currently). The

Business Group Administrator (of Business Group B) is further able to impersonate
the latest version of the person (which belongs to Business Group B).

However, if the Business Group Administrator selects the old version of the person
(which belongs to Business Group A), Incent displays a message and disables the
Impersonate User button.

note: In Xactly Analytics, only Business Administrators are able to impersonate people;
Business Group Administrators are unable to impersonate people in Analytics.