Access control items

An access control item applies to entities and processes only within its branch. If specified with subtree scope, the access control item applies to lower branches of an organization tree. Most of the access control items are defined at the Organization level. There are more considerations, such as:

• Creating access control items at a specific business unit in the Organization to grant operations and permissions for objects within that branch.
• For a business unit object such as a business partner organization, an access control item must be originated one level higher. The access control item has a target entity type of business partner organization, to enable searching.