Restrict Deal Access in Bitrix24 by Department

Restrict Deal Access in Bitrix24 by Department

A manager from the retail department opens the CRM and sees all company deals — wholesale contracts, tenders, partner agreements. They accidentally edit someone else's card, see confidential amounts. The department head, on the other hand, cannot see their subordinates' deals and cannot monitor work. Both situations lead to data leaks and reduced efficiency. We configure access rights so that everyone sees only their own. In one project for a network of 40 managers, the setup took 6 hours and reduced access errors by 70%. We have completed over 50 CRM configuration projects and guarantee results.

Why Is It Important to Restrict Access?

Without restrictions, employees get unnecessary information, and managers lose control. Configuring rights in Bitrix24 solves these problems through roles and visibility levels. A role model is 3 times more effective than individual settings: it requires less administration time and eliminates human errors when assigning rights to each user. The role determines allowed actions (read, edit, delete), and the level determines the scope (own deals, department, all). According to our data, using roles reduces rights management time by 50%.

How to Set Up Roles for a Department?

Roles are created in CRM → Settings → Permissions → Access Permissions. A typical set includes:

• Manager — read and edit own deals, add new ones. Others' deals are hidden.
• Department head — read and edit deals of own department and subdepartments, reassign responsible person.
• Director — full access to all deals, including export and deletion.
• Observer — read all deals without editing.

Each role is configured separately for deals, contacts, companies, leads, and quotes. In 80% of cases, 4 roles are enough, but large companies may need up to 10.

What Should Be Done Before Configuration?

Before setting rights, ensure the company structure is filled in under Company → Structure. If an employee is not attached to a department, they end up in the root group, and rights won't work. Check that each department has a head and that users have correct positions. This takes from 30 minutes to 2 hours depending on company size.

Assigning Roles to the Company Structure

Roles are assigned to departments, not users — this is a key point. If the company structure is not configured, rights will not work. Steps:

1. Create departments under Company → Structure. Distribute employees. Ensure no users are in the root group.
2. Create CRM roles with required permissions.
3. Assign the role to a department or specific employee in CRM access settings.

Check that rights apply: log in as an employee and open CRM. If deals are hidden, it works. Otherwise, the structure is likely not filled.

Multiple Pipelines and Rights

If the CRM has several pipelines (retail, wholesale, tenders), rights are restricted at the deal direction level. Add a condition in rights on the "Deal direction" field. This approach isolates data precisely and allows, for example, hiding wholesale deals from retail managers. According to our data, this reduces accidental changes by 40%.

Typical Mistakes and How to Avoid Them

What Is Included in the Setup

We conduct an audit of your current company structure, create CRM roles (manager, department head, director, observer), configure visibility rights for deals, contacts, and companies, and restrict access by pipelines. Then we test under different accounts and document the access matrix. As a result, you get a transparent rights system that protects data and speeds up work. In projects with 50+ managers, the average setup time is 2 days.

We are a team of certified specialists with 8+ years of experience in Bitrix24. We have completed over 50 CRM configuration projects. We guarantee that after setup, each employee will see only their deals, and the manager will see department deals. Contact us to assess your situation — we'll find the optimal solution in a couple of days. Get a consultation for your business — we'll help avoid leaks and improve control.

For more details on access rights, read the official documentation.

How a corporate portal on Bitrix24 solves the problem of information chaos?

Employees spend up to 2 hours a day searching for files, emails, and solutions. Tasks get lost in dozens of chats, approvals get stuck for weeks. The manager learns about missed deadlines only at a meeting. A corporate portal on Bitrix24 ties every message, document, and task to a single context. You get a transparent picture of work: who is working on what, which stages, where bottlenecks are. Wikipedia: Information silo describes how unorganized data reduces productivity – a portal cuts that loss by 60–70%.

We will evaluate your project for free – contact us to get the architecture in 2 days. A medium‑sized company typically saves 2.5 million rubles annually after deployment (based on our projects).

What does the portal offer in daily work and why is it better than messengers?

In messengers, information is unstructured – discussions get buried within a week. On the portal, every message is tied to a task, project, or document. Employees spend up to 30% of their work time searching for data (McKinsey). The portal reduces this time by 2–3 times thanks to structured repositories and full‑text search.

Communications. Activity stream, messenger, and video calls are tied to specific tasks. Any discussion can be found six months later – in a messenger it would be buried within a week.

Tasks and projects. Kanban, Gantt, checklists, dependencies, time tracking. Each employee's efficiency is visible in reports – no need to wait for a meeting.

Document flow. Approval routes through the business process designer: leave request → manager → HR → accounting. Electronic signature, versioning, deadline control. Integration with electronic document management (SBIS, Diadoc) via REST API.

HR. Onboarding of new employees, leave/travel requests, organizational structure, absence schedule. An employee knows where to go from day one.

Knowledge base. Bitrix24 wiki engine: regulations, instructions. Knowledge does not leave with departing employees.

Implementation example. For a manufacturing company with 320 employees, we deployed a portal with integration of 1C:SALARY AND HR MANAGEMENT and Active Directory in 4 months. Travel request approval time decreased from 3 days to 4 hours. Savings on employee idle time amounted to 1.5 million rubles per year. Managers receive automatic reports on department efficiency. Customer response time decreased by 20%. Portal payback period is 7 months.

How does integration with 1C and Active Directory accelerate HR management?

Integration with 1C:Enterprise via the b24connector module or custom REST handler: a leave request is approved on the portal through a business process and automatically enters 1C:SALARY AND HR MANAGEMENT for vacation pay calculation. Active Directory (SSO via the ldap module) – the employee account is created once in AD and synchronized to the portal, email, VPN. Upon dismissal, it is blocked everywhere. Manual account creation is eliminated, errors are minimized.

Types of corporate portals and key integrations

Additional integrations that deliver real value:

• Email: Exchange via EWS API or IMAP, calendar synchronization, creating a task from an email.
• IP telephony: Asterisk, Mango Office, Zadarma via REST API – calls from the portal, contact card, call recording.
• Video conferencing: built‑in video calls or integration with Zoom/Teams via marketplace.
• EDI: SBIS, Diadoc via REST API – fully electronic document flow with counterparties.

Security and compliance with Federal Law 152‑FZ

The portal contains personal data, financial reports, strategic plans. We guarantee protection:

• role model via CGroup and section‑level permissions;
• two‑factor authentication (OTP, Yandex.Key, SMS);
• audit of all actions (b_event_log);
• TLS encryption for transmission and disk encryption;
• full compliance with Federal Law No. 152‑FZ "On Personal Data".

How is implementation carried out? Step‑by‑step plan

1. Audit — we record current processes, measure time losses.
2. Design — choose portal type, plan integrations.
3. Implementation — configure business processes, permissions, interface.
4. Test — pilot group tests scenarios, we fix issues.
5. Launch — connect all employees, train, hand over documentation.

What you receive after implementation

• Project documentation: architecture, integration scheme, business process diagrams.
• Configured portal with all integrations (1C, AD, telephony, EDI).
• Business process descriptions and instructions for administrators and users.
• 30 days of technical support after launch.
• Access to our knowledge base and migration scripts.

Post‑launch support: how to prevent the portal from becoming obsolete

After six months, many portals become abandoned. To avoid this, we offer packages with fixed SLA and a dedicated administrator. Performance monitoring, platform updates, user administration, development of new modules. Our team has over 10 years of experience and more than 50 implemented corporate portals on Bitrix24. We are a certified 1C‑Bitrix partner, guaranteeing quality and deadlines.

Mobile access. Native Bitrix24 app (iOS/Android) with push notifications, tasks, chats. Responsive web interface for extranet users (no app installation required). Offline access to documents and tasks, sync when connectivity is restored.

Order a turnkey corporate portal implementation

Schedule a free audit – we will evaluate your project, propose architecture, and give clear timelines. Get a comprehensive proposal and see that the portal pays for itself within the first six months. Contact us today.