0% found this document useful (0 votes)
25 views

sharing rule

The document outlines Salesforce sharing rules and security features, detailing Organization-Wide Defaults (OWD), Role Hierarchy, Sharing Rules, Manual Sharing, and Apex Sharing. OWD settings establish baseline access levels for records, while Role Hierarchy and Sharing Rules extend access based on user roles and criteria. Manual Sharing allows ad-hoc sharing of records, and Apex Sharing enables programmatic access control through Apex code for complex requirements.

Uploaded by

praggan1
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
25 views

sharing rule

The document outlines Salesforce sharing rules and security features, detailing Organization-Wide Defaults (OWD), Role Hierarchy, Sharing Rules, Manual Sharing, and Apex Sharing. OWD settings establish baseline access levels for records, while Role Hierarchy and Sharing Rules extend access based on user roles and criteria. Manual Sharing allows ad-hoc sharing of records, and Apex Sharing enables programmatic access control through Apex code for complex requirements.

Uploaded by

praggan1
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 8

SALESFORCE ENTHUSIASTS

SALESFORCE SHARING
RULES AND SECURITY
SALESFORCE SHARING RULES
AND SECURITY FLOW

Apex Sharing

Manual Sharing

Sharing Rules

Role Hierarchy

Organization-Wide Defaults (OWD)


ORGANIZATION-WIDE DEFAULTS (OWD)

OWD settings define the baseline access level for records that users
do not own. Setting the OWD to "Private" ensures that records are not
shared unless explicitly granted.
Example:
Scenario: Two departments (Loans and Investments) need
confidentiality.
OWD Setting: Set to Private for objects like Loan__c and
Investment__c.
Result:
Loans employees see only their department’s records.
Investments employees see only their own records.
No accidental cross-department access unless explicitly
shared.
ROLE HIERARCHY

Role hierarchy automatically grants record access to users higher up


in the hierarchy.
Scenario: A sales team with a hierarchy: Sales Director > Regional
Manager > Sales Reps.
Role Setup:
Sales Director at the top.
Regional Manager (East/West) below.
Sales Reps under their respective regions.
Result:
Sales Director sees all regional records.
East Regional Manager sees only East sales reps’ records.
Sales Reps see only their own records (unless sharing rules
grant more access).
SHARING RULES

Extend access to records based on ownership or criteria (works when OWD is set to
Private or Public Read Only).
Scenario:
OWD for Opportunity is Private.
Sales Managers in the "East Region" need access to all opportunities owned by their
team.
Setup:
1. Public Group: Create a group called "East Sales Managers."
2. Sharing Rule:
Rule Type: Owner-Based.
Share Records Owned By: "East Sales Team" (role/subordinates).
Share With: "East Sales Managers" group.
Access Level: Read/Write.
Outcome:
All opportunities owned by the East Sales Team are editable by East Sales Managers
SHARING RULES

Example 2: Criteria-Based Sharing Rule


Scenario:
OWD for Case is Private.
Share high-priority cases with the "Support Leadership" group.
Setup:
1. Public Group: Create "Support Leadership."
2. Sharing Rule:
Rule Type: Criteria-Based.
Criteria: Priority = High.
Share With: "Support Leadership" group.
Access Level: Read-Only.
Outcome:
All high-priority cases are visible (but not editable) to the Support Leadership group.
MANUAL SHARING

Allows record owners to ad-hoc share individual records with users/groups.


Scenario:
User A owns an Account named "Acme Corp."
User B (from a different department) needs temporary read-only access to this
Account.
Steps:
1. Navigate to the "Acme Corp" Account record.
2. Click Share > Add Users/Groups.
3. Select User B and set Access Level to Read-Only.
Outcome:
User B can view the "Acme Corp" Account but cannot edit or delete it.
Limitation:
Manual sharing is not scalable (time-consuming for large datasets).
Apex Sharing

Apex Sharing allows developers to programmatically grant access to records using


Apex code. This is useful when standard sharing rules do not meet complex business
requirements
Types of Apex Sharing:
User Managed Sharing: Users manually share records.
Apex Managed Sharing: Developers control sharing through Apex code.
Implicit Sharing: Automatic sharing based on relationships (e.g., Account-
Contact).

You might also like