Add users to multiple organization units
Once you have created the org. hierarchy, you can add users to the root organization and other child org. units.
Your Org IT Admin should normally perform this operation.
As the Org Security/IT Admin, you can work jointly with the security and operations team to determine the list of users that should be given access to the carious org units, including the root org or other branch or leaf-level org.
Before adding users to various organizations, you must have completed the following step:
Enable the org hierarchy - This step is mandatory since the associated org unit must be specified during user creation.
A user added to the root-level / parent organization will have access to all the org units in the multi-org hierarchy.
Add a user to an org. unit
A user can be added to one or multiple organizational units. However, there will be no explicit inheritance of access to a user added to the parent or a preceding org unit in the hierarchy.
For example, adding a user to the root org or a parent org does not entitle automatic inheritance of access to its child orgs. The IT Org admin will have to grant access explicitly by manually selecting the child orgs to which the user needs access. In our org hierarchy example, If a particular user has access to the Western Europe org unit, and wishes to have explicit access to all its child org units, the user’s IT org admin will have to manually select each org unit to which the user requires access. Automatic inheritance for child org access from root is not supported.
To add a user to an org. unit
- Click your username at the top right and navigate to Administration > Manage Users
- Click Add Single User
- On the new user creation page, fill in the basic information along with the fields mentioned below.
- Company (For Multi-org enabled accounts ): From the dropdown, select all the preferred org units to which you want to add the user. You can select multiple org units here.
- Zuora Platform Role: You can select a Zuora Platform Role and other roles for the user. You define and manage user roles on the Manage User Roles settings page.
See Personal Settings for more information about the fields that you can set when creating a user.
4. Click Save
The user has been added to the list of users with Pending Activation status.
Standard User Access
By default, a standard user will be logged into the Org Unit that he is assigned to by the Security Admin at the time of creating their profile. Only a user with access to one or more org. units can switch contexts between these org. units.
User context switching between multiple organizational units
A user with access to multiple org. units within the org. hierarchy can switch between these org units. The view and data will dynamically change based on the org. unit the user is on. Visibility and access to various Zuora components and data will be strictly confined to the org units a user has access to.
There is no default inheritance to access the leaf-level orgs. even if the user has access to the preceding branch-level org. unit.
In our org hierarchy example, let us assume that Alice has access to the root org of Acme Corp.
There is no default inheritance for Alice to be able to access the child org units of the Acme Corp (root). So, Alice can only see the data that belongs to Acme corp. and not any other org. units data. Nor can she switch to another org. unit, since she is not added as a user there.
For Alice to be able to access the Western Europe or Austria org unit's data, her IT org admin will have to explicitly add her as a user to each of these org units.
Requesting access to additional Org. units
Your IT Admin/ Security Admin would have to grant any user additional permissions to the Org Units that are in the Org Hierarchy. However, the users cannot see how many leaf nodes exist, but the user can see the Org Hierarchy downstream from the root in the Org Hierarchy context switcher.