**Source URL:** https://medical.veevavault.help/en/lr/921854/

# Managing Team Security

The _Team, Team Assignment,_ and _Team Member_ objects automate user-managed group membership and the creation of _User Role_ and _User Role Setup_ records according to rules specific to your PromoMats or Medical Vault, simplifying agency user management for global and local teams.

Adding a _Team Member_ to a _Team_ automatically provides that user with the security template associated with their _Team Assignment_.

## Configuration Prerequisites

Before configuring _Teams_, _Team Members_, and _Team Assignments_, you must ensure that the fields on the _Team Assignment URS_ object match the fields on the _User Role Setup_ object. For example, the _Country_ (`country__c`) field on a _Team Assignment URS_ record populates the _Country_ (`country__c`) field on the corresponding _User Role Setup_ record. The objects must be identical for this feature to work properly. If the field configurations do not match, Vault displays an error.

PromoMats Vaults should have the following objects and their associated fields configured:

| TA-URS Object | Corresponding URS Object |
| --- | --- |
| _Team Assignment URS_ (`team_assignment_urs__v`) | _User Role Setup_ (`user_role_setup__v`) |

Medical Vaults should have the following objects and their associated fields configured:

| TA-URS Object | Corresponding URS Object |
| --- | --- |
| _Team Assignment URS (Documents and SCP)_ (`team_assignment_urs_documents_and_scp__v`) | _User Role Setup (Documents and SCP)_ (`user_role_setup__v`) |
| _Team Assignment URS (Case)_ (`team_assignment_urs_case__v`) | _User Role Setup (Case)_ (`user_role_setup_case__v`) |
| _Team Assignment URS (Publications)_ (`team_assignment_urs_publications__v`) | _User Role Setup (Publications)_ (`user_role_setup_publications__v`) |

## Creating Team Records

To create a team:

  1. Navigate to **Business Admin > Objects > Teams**.
  2. Click **Create**.
  3. Enter a **Name**.
  4. Optional: Select a a **Brand** and an **Agency** or **Organization**.
  5. Optional: Select **Country/Region**.
  8. Click **Save**, or click **Save + Create** to continue creating _Teams_.

To create a _Team Assignment_:

  1. On the _Team_ details page, expand the **Team Assignment** section.
  2. Click **Create**.
  3. Enter a **Name**.
  4. Select an **Assignment**.
  5. Enter a **Description**.
  6. Click **Save**, or click **Save + Create** to continue creating _Team Assignments_.

To create a _Team Assignment User Role_:

  1. Navigate to **Objects > Team Assignment User Role**.
  2. Click **Create**.
  3. Select an **Application Role**.
  4. Select a **Team Assignment**.
  5. Click **Save**, or click **Save + Create** to continue creating _Team Assignment User Roles_.

To create a _Team Assignment URS_ record:

  1. Navigate to **Objects > Team Assignment URS**.
  2. Click **Create**.
  3. Select a **Role**.
  4. Select a **Team Assignment**.
  5. Optional: Select a **Brand**, **Country**, **Creative Agency**, and **Document Type Group**.
  6. Click **Save**, or click **Save + Create** to continue creating _Team Assignment URS_ records.

To create _Team Members_:

  1. On the _Team_ details page, expand the **Team Members** section.
  2. Click **Create**.
  3. Select a **Team Assignment**.
  4. Select a **User**.
  5. Click **Save**, or click **Save + Create** to continue creating _Team Members_.

To create _Team Assignment Groups_:

  1. On the _Team_ details page, select the **Team Assignment**.
  2. Expand the **Team Assignment Groups** section.
  3. Click **Create**.
  4. Select a user-managed **Group** from the drop-down.
  5. Set the **Status** to **Active**.
  6. Click **Save**, or click **Save + Create** to continue creating _Team Assignment Groups_.

## Managing Teams, Team Assignments, & Team Members

When you create a _Team Member_ record, Vault automatically adds the user to user-managed groups defined in the assignment's _Team Assignment Groups_ and creates _User Role Setup_ and _User Role_ records as defined in the assignment's _Team Assignment URS_ and _Team Assignment User Role_, respectively.

When you delete a _Team Member_ record, Vault automatically removes the user from applicable user-managed groups and deletes the matching _User Role_ and _User Role Setup_ records. Vault deletes matching _User Role_ and _User Role Setup_ records even if they were not created via _Team Membership_, and also removes users from user-managed groups they were added to manually. Vault does not delete the security for this user if they have the same security in a different _Team Assignment_.

If a _Team Member_ belongs to an assignment, and you create a _Team Assignment URS_ or _Team Assignment User Role_ record for that assignment, Vault gives the _Team Member_ the relevant _User Role Setup_ or _User Role_ permissions.

Vault prevents you from creating duplicate _Team Assignment URS_, _Team Assignment User Role_, _Team Assignment Group_, and _Team Member_ records.

### Copying Team Security

When you copy a _Team_ object record via the _Copy Record_ action, Vault copies the _Team_, _Team Assignment_, _Team Assignment URS_, _Team Assignment User Role_, and _Team Assignment Group_ records associated with the team, but does not copy the _Team Members_.

## Related Permissions

The following permissions control functionality related to managing team security:

| Type | Permission Label | Controls |
| --- | --- | --- |
| Security Profile | Objects: Team: Create, Read, Edit, Delete | Ability to create, read, edit, and delete _Team_ records |
| Security Profile | Objects: Team Member: Create, Read, Edit, Delete | Ability to create, read, edit, and delete _Team Member_ records. If the _Team Assignment_ has _Team Assignment URS_ records, you must also have permissions for that object. |
| Security Profile | Objects: Team Assignment: Create, Read, Edit, Delete | Ability to create, read, edit, and delete _Team Assignment_ records |
| Security Profile | Objects: Team Assignment URS: Create, Read, Edit, Delete | With _User Role Setup_ object permissions, this grants the ability to create, read, edit, and delete _Team Assignment URS_ records |
| Security Profile | Objects: Team Assignment User Role: Create, Read, Edit, Delete | Ability to create, read, edit, and delete _Team Assignment User Role_ records |
| Security Profile | Objects: Team Assignment Group: Create, Read, Edit, Delete | Ability to create, read, edit, and delete _Team Assignment Group_ records |
| Security Profile | Objects: User Role: Edit | Ability to edit the _User Role_ object |
| Security Profile | Objects: User Role Setup: Edit | Ability to edit the _User Role Setup_ object |