How do user permissions work for multi-level organizations?

Question

We are currently using Action Network for our CRM (even though it is not designed for that), marketing and digital mobilising tools.

We moved to them because of their system of parent/sibling/child groups. In AN, each of our branches can have a child group (siblings of each other). Data flows up to the parent group automatically but down only if we specify.

Could we replicate this in CiviCRM? Could we connect different local/national databases together? Or use segmentation and user permissions to achieve the same effect (i.e. local leaders only accessing local data, national leaders accessing it all etc)

Many thanks, Stuart

Answer 1

Yes - I've done this several times. Many organizations with a chapter/branch format do this, such as IMBA, Wikimedia Foundation, the Australian Green Party, and many others.

There are several different approaches you can take.

• The "easy" approach is just to use built-in ACLs. Create groups of "staff" and "members" for each chapter, using parent/child groups to handle the hierarchy. I've done this for a union with 10 locals. I wouldn't scale this much past that.

• The "heavyweight" solution is CiviCRM Multisite You'll want the Multisite Permissions extension. Use this approach when each chapter needs its own website.

• The middle ground is to use Relationship Permission ACLs. I haven't used this, but it's helpful if you a) don't need separate sites per chapter, b) you need 3+ levels of organization (sounds like you do), c) You have enough chapters that using traditional ACLs is unwieldy.

As of November 2017, the relevant docs are being reorganized. Multisite is being separated from multi-level ACLs. However the original wiki page combining both is still online.