# Managing Brand Team Security

The _Team, Team Assignment,_ and _Team Member_ objects automate user-managed group membership and the creation of _User Role_ and _User Role Setup_ records according to rules specific to your Vault, simplifying agency user management for global and local brand teams.

Adding a _Team Member_ to a _Team_ automatically provides that user with the security template associated with their _Team Assignment_.

## Configuring Prerequisites

Before configuring _Teams_, _Team Members_, and _Team Assignments_, you must ensure that the fields on the _Team Assignment URS_ object match the fields on the _User Role Setup_ object. For example, the _Country_ (`country__c`) field on a _Team Assignment URS_ record populates the _Country_ (`country__c`) field on the corresponding _User Role Setup_ record. The objects must be identical for this feature to work properly. If the field configurations do not match, Vault displays an error.

## Creating Brand Team Records

To create a brand team:

  1. Navigate to **Business Admin > Objects > Teams**.
  2. Click **Create**.
  3. Enter a **Name**.
  4. Select an **Agency**.
  5. Select a **Brand**.
  6. Select a **Country / Region**.
  7. Click **Save**, or click **Save + Create** to continue creating _Teams_.

To create a _Team Assignment_:

  1. On the _Team_ details page, expand the **Team Assignment** section.
  2. Click **Create**.
  3. Enter a **Name**.
  4. Select an **Assignment**.
  5. Enter a **Description**.
  6. Click **Save**, or click **Save + Create** to continue creating _Team Assignments_.

To create a _Team Assignment User Role_:

  1. Navigate to **Objects > Team Assignment User Role**.
  2. Click **Create**.
  3. Select an **Application Role**.
  4. Select a **Team Assignment**.
  5. Click **Save**, or click **Save + Create** to continue creating _Team Assignment User Roles_.

To create a _Team Assignment URS_ record:

  1. Navigate to **Objects > Team Assignment URS**.
  2. Click **Create**.
  3. Select a **Role**.
  4. Select a **Team Assignment**.
  5. Optional: Select a **Brand**, **Country**, **Creative Agency**, and **Document Type Group**.
  6. Click **Save**, or click **Save + Create** to continue creating _Team Assignment URS_ records.

To create _Team Members_:

  1. On the _Team_ details page, expand the **Team Members** section.
  2. Click **Create**.
  3. Select a **Team Assignment**.
  4. Select a **User**.
  5. Click **Save**, or click **Save + Create** to continue creating _Team Members_.

To create _Team Assignment Groups_:

  1. On the _Team_ details page, select the **Team Assignment**.
  2. Expand the **Team Assignment Groups** section.
  3. Click **Create**.
  4. Select a user-managed **Group** from the drop-down.
  5. Set the **Status** to **Active**.
  6. Click **Save**, or click **Save + Create** to continue creating _Team Assignment Groups_.

## Managing Teams, Team Assignments, & Team Members

When you create a _Team Member_ record, Vault automatically adds the user to user-managed groups defined in the assignment's _Team Assignment Groups_ and creates _User Role Setup_ and _User Role_ records as defined in the assignment's _Team Assignment URS_ and _Team Assignment User Role_, respectively.

When you delete a _Team Member_ record, Vault automatically removes the user from applicable user-managed groups and deletes the matching _User Role_ and _User Role Setup_ records. Vault deletes matching _User Role_ and _User Role Setup_ records even if they were not created via _Team Membership_, and also removes users from user-managed groups they were added to manually. Vault does not delete the security for this user if they have the same security in a different _Team Assignment_.

If a _Team Member_ belongs to an assignment, and you create a _Team Assignment URS_ or _Team Assignment User Role_ record for that assignment, Vault gives the _Team Member_ the relevant _User Role Setup_ or _User Role_ permissions.

Vault prevents you from creating duplicate _Team Assignment URS_, _Team Assignment User Role_, _Team Assignment Group_, and _Team Member_ records.

### Copying Team Security

When you copy a _Team_ object record via the _Copy Record_ action, Vault copies the _Team_, _Team Assignment_, _Team Assignment URS_, _Team Assignment User Role_, and _Team Assignment Group_ records associated with the team, but does not copy the _Team Members_.

## Related Permissions

The following permissions control functionality related to managing brand team security:

| Type | Permission Label | Controls |
| --- | --- | --- |
| Security Profile | Objects: Team: Create, Read, Edit, Delete | Ability to create, read, edit, and delete _Team_ records |
| Security Profile | Objects: Team Member: Create, Read, Edit, Delete | Ability to create, read, edit, and delete _Team Member_ records. If the _Team Assignment_ has _Team Assignment URS_ records, you must also have permissions for that object. |
| Security Profile | Objects: Team Assignment: Create, Read, Edit, Delete | Ability to create, read, edit, and delete _Team Assignment_ records |
| Security Profile | Objects: Team Assignment URS: Create, Read, Edit, Delete | With _User Role Setup_ object permissions, this grants the ability to create, read, edit, and delete _Team Assignment URS_ records |
| Security Profile | Objects: Team Assignment User Role: Create, Read, Edit, Delete | Ability to create, read, edit, and delete _Team Assignment User Role_ records |
| Security Profile | Objects: Team Assignment Group: Create, Read, Edit, Delete | Ability to create, read, edit, and delete _Team Assignment Group_ records |
| Security Profile | Objects: User Role: Edit | Ability to edit the _User Role_ object |
| Security Profile | Objects: User Role Setup: Edit | Ability to edit the _User Role Setup_ object |