How to ensure that resources who have edit access (on instance level) on any custom investment can only be able to create the instances for subobjects under it?
We can't give them create rights on global level as it will allow them to then create subobjects even for investments that they have view access only.
We can't give them obs create rights because then it would work for multiple investments rather than their own only.
Release : 16.0.3
There is an instance right allows resource to create cust_inv_sub subobjects within a specific Cust INV master object.
Below is the sample right you should see.
Cust INV - Create - cust_inv_sub
Cust INV is the custom investment and cust_inv_sub is the subobject.