Anyone find a hack to restrict employees from certain customers and/or their subrecords? Outside of sales teams, classes, departments, locations or by subsidiary. I.e. if customer category = X, then employee can't view record or see on any list.

@rudler As far as I know there are 2 options: 1. Use workflow to restrict users/roles (actually to return user error) from customer with specific category, and use publish locked dashboards. 2. If I'm not wrong, the sales rep of the customer itself can use as a vanilla segment for the customer's classification, and can be restricted via class or department roles.

That's great (return user error). I'll have to restrict the role to certain lists as well (that only show their particular customer cat). I'll look into the vanilla segment thing.

@rudler FYI the return user error action appears upon entering to the relevant customer entity. User still can retrieve the customer's data via simple saved search. Hence, you should consider to lock user/roles dashboard and navigation or even remove the permission to create saved search.

Yes, I need to restrict the roles to particular searches only with said customer category.