Restrict Deal Access in Bitrix24 by Department
A manager from the retail department opens the CRM and sees all company deals — wholesale contracts, tenders, partner agreements. They accidentally edit someone else's card, see confidential amounts. The department head, on the other hand, cannot see their subordinates' deals and cannot monitor work. Both situations lead to data leaks and reduced efficiency. We configure access rights so that everyone sees only their own. In one project for a network of 40 managers, the setup took 6 hours and reduced access errors by 70%. We have completed over 50 CRM configuration projects and guarantee results.
Why Is It Important to Restrict Access?
Without restrictions, employees get unnecessary information, and managers lose control. Configuring rights in Bitrix24 solves these problems through roles and visibility levels. A role model is 3 times more effective than individual settings: it requires less administration time and eliminates human errors when assigning rights to each user. The role determines allowed actions (read, edit, delete), and the level determines the scope (own deals, department, all). According to our data, using roles reduces rights management time by 50%.
How to Set Up Roles for a Department?
Roles are created in CRM → Settings → Permissions → Access Permissions. A typical set includes:
- Manager — read and edit own deals, add new ones. Others' deals are hidden.
- Department head — read and edit deals of own department and subdepartments, reassign responsible person.
- Director — full access to all deals, including export and deletion.
- Observer — read all deals without editing.
Each role is configured separately for deals, contacts, companies, leads, and quotes. In 80% of cases, 4 roles are enough, but large companies may need up to 10.
| Access Level | What the employee sees |
|---|---|
| Own | Only deals where they are responsible |
| Own department | All deals of the department |
| Own department and subdepartments | Deals of the department + nested subdivisions |
| All | All CRM deals |
What Should Be Done Before Configuration?
Before setting rights, ensure the company structure is filled in under Company → Structure. If an employee is not attached to a department, they end up in the root group, and rights won't work. Check that each department has a head and that users have correct positions. This takes from 30 minutes to 2 hours depending on company size.
Assigning Roles to the Company Structure
Roles are assigned to departments, not users — this is a key point. If the company structure is not configured, rights will not work. Steps:
- Create departments under Company → Structure. Distribute employees. Ensure no users are in the root group.
- Create CRM roles with required permissions.
- Assign the role to a department or specific employee in CRM access settings.
Check that rights apply: log in as an employee and open CRM. If deals are hidden, it works. Otherwise, the structure is likely not filled.
Practice example
For a network of 40 managers, the setup took 6 hours. After implementation, accidental changes to others' deals decreased by 70%, and managers gained full control over the department funnel.Multiple Pipelines and Rights
If the CRM has several pipelines (retail, wholesale, tenders), rights are restricted at the deal direction level. Add a condition in rights on the "Deal direction" field. This approach isolates data precisely and allows, for example, hiding wholesale deals from retail managers. According to our data, this reduces accidental changes by 40%.
Typical Mistakes and How to Avoid Them
| Mistake | Consequence | Solution |
|---|---|---|
| Structure not configured | Everyone sees all deals | Distribute employees into departments |
| Rights assigned to user, not department | Rights not updated upon dismissal | Assign to department |
| Forgot about contacts and companies | Client base remains open | Configure rights for all entities |
| Mixed roles with overlapping rights | Unpredictable access | Create a strict role hierarchy |
What Is Included in the Setup
We conduct an audit of your current company structure, create CRM roles (manager, department head, director, observer), configure visibility rights for deals, contacts, and companies, and restrict access by pipelines. Then we test under different accounts and document the access matrix. As a result, you get a transparent rights system that protects data and speeds up work. In projects with 50+ managers, the average setup time is 2 days.
We are a team of certified specialists with 8+ years of experience in Bitrix24. We have completed over 50 CRM configuration projects. We guarantee that after setup, each employee will see only their deals, and the manager will see department deals. Contact us to assess your situation — we'll find the optimal solution in a couple of days. Get a consultation for your business — we'll help avoid leaks and improve control.
For more details on access rights, read the official documentation.