Understanding Cross-References and Centers
DataSync Cross-References now store a field for Security Category. This field is available for every Cross-Reference created in Data Management > Import/Export. Consequently, cross-references created within the context of a center will be in the same security category as that center (and only editable by those with access to that center), while cross-references created in All Centers mode can be designated for a specific center.
In addition, Cross-Reference management permissions can now be assigned as Security Category Permission Overrides, thus also limiting the list of cross-references that an administrator with access to multiple centers can view. These two features essentially help you control the list of Cross-References that your administrators are permitted to view, create, edit, or delete.
Cross-Reference roles and permissions require that administrators also have the Import/Export role in order to see and work in the Cross-Reference area of Import/Export. However, the Cross-Reference roles no longer require any DataSync permissions or roles.
Center Administrators -- when operating in the context of a center, administrators who have Cross-Reference permissions will only see and be able to edit the cross-references that apply to that Center (that is, the cross-references that are in the same security category as the center). For example, an administrator operating in the Eastern Center would be able to see and edit a cross-reference to a donation form that was generated in the Eastern Center -- but would not see any cross-references to donation forms in the Western or Southern centers. Likewise, any cross-references created in that Center would automatically be categorized in the Center's security category and would not be available to other centers.
Administrators with access to multiple Centers -- Site Administrators operating in All Centers mode will see all cross-references for all centers (since they have access to and permissions for everything); however, since Cross-Reference management permissions can now be assigned as Security Category Permission Overrides, you can also create a group of Jr. Administrators who have access to the cross-references for some centers, while being denied access to the cross-references in other centers. Directions for creating a group of Jr. Admins who can only see the cross-references for select centers follow.