[VA] How to restrict access to a particular company's data

Setting Up Data Security for Companies

1. Create a Default Security Group:

   • Use VA Security Groups to make a group for Group Type 0-Data on the bHQCo datatype (e.g., Co. Data Sec-Default).

   • Add all users who need access to all companies to this group before activating data security.

2. Create Company-Specific Groups:

   • Make a separate Security Group for each company.

   • Add users who should have limited access to the appropriate company group(s).

3. Set Up Data Security:

   • Open VA Data Security Setup for bHQCo (and other modules like bAPCo).

   • Check Apply Security and enter the default Security Group.

   • Save and confirm to grant the default group access to all companies.

4. Grant Access to Company Groups:

   • Use VA Data Security Access to give company-specific groups access to their companies.

5. Secure Tables:

   • In VA Data Security Setup, check the Secure Tables tab (start with default settings).

6. Regenerate Views:

   • Click Regenerate View → Add Unsynchronized Views → Regenerate Views to apply security changes.

Tip: The same security groups can be used for other modules like bAPCo.
Note: Default Security Group applies to all companies.