Enable Perimeters for Individuals (LEM)

The Enable Perimeters for Individuals feature extends the existing Perimeter Permissions system—previously available only for companies—to individual entities. It gives administrators precise control over which users can access or edit individuals’ data, ensuring consistent governance across both entity types. ✅

❓ What Are Perimeters for Individuals

Perimeters define which users or teams have rights over specific entities in your workspace. With this update, you can now:

• Manage access to Individuals just like Companies.
• Set custom access and edit permissions for users or groups.
• Organize your data by assigning individuals to one or more perimeters.
• Enable or disable perimeter permissions for Individuals independently from Companies.

This allows you to have perimeters enabled only for Companies, only for Individuals, for both, or for none—depending on your governance model. ⚖️

⚡ Dynamic Perimeters for Individuals (Automatic Include/Exclude)

In addition to manually selecting individuals in a perimeter, you can also use Dynamic Perimeters. Dynamic Perimeters automatically include or exclude individuals based on filters—so the perimeter stays up to date without manual maintenance. ✨

When should I use Dynamic Perimeters?

• You manage a large number of individuals and don’t want to maintain lists manually.
• Individuals frequently change (new records added, roles updated, metadata updated).
• You want consistent rules that always apply (example: “include all individuals with a given attribute”).

What stays the same?

• Permission rules do not change: you still define who can access and who can edit for the perimeter.
• Dynamic Perimeters follow the same logic as dynamic perimeters on Companies.

✅ Tip: Use a clear name to make the rule obvious (example: “North Region – Individuals (Dynamic)”).

✍ How to Enable Perimeters for Individuals

Step 1: Open Permissions Configuration

Go to Configuration > Permissions. You’ll find two tabs: Companies and Individuals.

Step 2: Activate the Individuals Perimeter Mode

On the Individuals tab, switch on the Enable perimeters toggle.

• The toggle is independent from the Companies one.
• A confirmation modal will appear before activation.

Step 3: Create a Perimeter

Click Create perimeter to start defining your new individual perimeter:

• Give your perimeter a name and optional color tag.
• Choose how individuals are selected:
  • Manual perimeter: select the Individuals to include.
  • Dynamic perimeter: set filters to automatically include/exclude individuals. ✨
• Set access and edit permissions for users or teams.
• Save to confirm — you can edit these settings anytime. ✍

Step 4: View and Edit Perimeters

• All individual perimeters are visible in the Individuals tabular view.
• You can modify permissions or update members directly from the perimeter editor.
• When editing manual selection, all selected individuals remain saved unless removed explicitly.
• When editing a dynamic perimeter, updates happen automatically based on your filters.

☝ Practical Use Cases

• Group admins can manage which individuals are visible or editable by their teams.
• Legal users can restrict access to personal information, helping enforce data privacy by default. ⚖️
• Multi-entity organizations can keep consistent permission rules across both company and individual datasets.

Example: You can give User A access-only rights and User B edit rights on a set of individuals within a specific perimeter.

✨ Best Practices

• Keep perimeter names clear and descriptive (e.g., “North Region – Individuals”).
• If you use dynamic rules, add “(Dynamic)” in the name to avoid confusion. ✨
• Always verify that the right users have access before finalizing permission changes.
• When importing individuals, use the correct template file name: import_individuals.xlsx.
• Use short descriptions (under 255 characters) for better readability.

❗ Limitations and Known Behaviors

• Perimeter data for Individuals and Companies are managed separately.
• If the feature is not enabled, perimeter columns and options for individuals remain hidden.
• In some reports, if the user has no access to a related individual, the entire record may be hidden (same as Companies behavior).
• Reference list permissions are suspended when perimeter mode is active.
• Non-managed individuals are tagged with a “non-managed” label in the view.

☕ Need Help?

If you experience any unexpected behavior (e.g., missing individuals in a perimeter or inconsistent permissions), please contact your DiliTrust Support representative or open a support ticket directly from your platform.