Hi Debbie Kulling,

In our primary analysis we found that the SQL query which is responsible to filter out the enabled and disabled check boxes , needs to correct.

Could you please provide your UserName and the exact policy name , which will help us in depth analysis.

I assumed you tried with Username deb and policyname BCC Admin User , as there is no policy with name "BCC Admin" .

Putting below corrected sample query for my reference purpose.

SELECT Distinct CompanySystemUser.CompanyID as ID, c.Name, Users.SystemUserID, Users.ID as [UID], Case When exists(Select ID from UserAccessPolicy_CompanyMapping Where CompanyId=c.ID and AccessRightsPolicyId= 438) Then 1 Else 0 End As IsSelected, Case When exists(Select AccessRightsPolicyId from SystemUsers inner join Users on SystemUsers.ID= Users.SystemUserID Where SystemUsers.ID in(Select SystemUsersId from CompanySystemUser Where CompanyId=c.ID) and AccessRightsPolicyId =438 and Users.RoleID =4 AND Users.ID =459) Then 1 Else 0 End As IsUsed
FROM Role, Users, CompanySystemUser, Company as c
WHERE Users.RoleID =2
AND Users.SystemUserID = CompanySystemUser.SystemUsersID
AND CompanySystemUser.CompanyID = c.ID
AND c.IsActive = 1
AND Users.ID =459
AND c.Name ='Hope Community Resources'
ORDER BY c.Name

Cc: Samir, Satya, Ganesh Sadawarte, Prashant Samal, Hrishikesh Deshpande, Bharti Satpute

The policy I am trying to add for "hope Community resources is below" When I go to the access policy using my user (user name: Deb) and click on "Company Mapping" the check box for "hope community resources" is greyed out and I cannot check it. This is the policy that BCC uses for all their admin users so we need to be able to add it to Hope Community Resources

Hi Debbie Kulling,

Thanks for confirmation, my assumptions were correct. This needs a code fix , SQL query needs to be corrected. We Will do this code change and deploy the build on preprod in coming deployment and once fix get verified on preprod, we will deploy this to stage and production in coming sprint. I hope this is ok with you.

Please let us know in case of any concerns.

Regards,
Santosh

Cc: Jaideep Vinchurkar, Satya, Nidhi Kaul

3C's:

Concern: Partner User with Role=2 not able to map policy to companies
Cause: User filteration criteria is missing in existing SQL queries of User Access Ploicy Comapny Mapping logic

Correction: Added missing User check in SQL query.

Hi Debbie Kulling,

I discussed this with Jaideep Vinchurkar, as per him it is correct system behavior. So no need to make any correction to existing behavior. Please let us know in case of any queries or you would like to have this change in existing policy.

Regards,
Santosh

Cc: Jaideep Vinchurkar, Satya

I don't understand your response. Hope Community Resources should have this role available. Why can we select every other company except Hope.

Please add Hope Community Resources to the "BCC Admin User" on Stage, Production and Pre Prod"

Hi Debbie Kulling,

Sorry about misunderstanding about this issue. I did further analysis on this and got to know this cannot be system's behavior.
Here are updated 3c's for this issue.

Concern: Debbie can not see the 'BCC Admin User' policy on admin user screen, which she wanted to assign to 'Hope admin' a company admin user. So she go to the access policy screen and tried to map the 'BCC Admin User' policy to Hope community resources company, but that company is grayed out in company-policy mapping screen.

Cause: Below rules will explain how policies work for partner and CA logins,
1. Partner/ broker and company admin can not have same access policy
2. When we map a policy to company, the policy become admin policy and can be seen on company admin user screen.
3. This policy can not be seen on create partner/ broker user.
4. If a policy is assigned to any partner/ broker, it is grayed out on company mapping screen.
5. If a policy is mapped to and company admin, then it cannot be un-mapped from company - policy mapping screen.

from back end, we found that all partners of hope community are assigned to 'BCC Admin User' policy, so when you go to company mapping screen, it is grayed out there. However, in database the access policy - company mapping entry is missing, so it is not showing on any of the screen.

Correction: I have added the access policy - company mapping entry in production database. And now you can see the entry on both screens.
Santosh Balid, please do the same for pre prod as well.

Hi Jaideep Vinchurkar,

I did the needful on preprod.

Regards,
Santosh

Cc: Debbie Kulling

Thank you I see it added on both prod and pre prod. You can close this ticket

I spoke too soon. Now I cannot add Kittitas County to the BCC Admin policy on Pre Prod. I don't understand why we can add some groups but not others. We were able to add city of Lynnwood

Hi Debbie Kulling,

Your User 'Deb' had no access to Kittitas County on preprod, so you were not able to see that.
With my user, I am able to do so...I have done the neeful. Could you please check now.

Regards,
Santosh

Cc: Jaideep Vinchurkar

Debbie Kulling, Please close this ticket, if everything working fine.