Putting It All Together

Congratulations! We've just implemented all of our required security and sharing settings, first by defining object-level access with profiles and permission sets, then by securing field-level access with field-level security, and finally by defining record-level access using org-wide defaults, role hierarchies, sharing rules, and manual sharing.

We learned about the difference between object-, field-, and record-level security, and how profiles, permission sets, and roles work together to first determine the objects and tabs that a user can possibly use, and then the specific records that the user can actually access and edit. We also learned ways to set up other profile-based features like record types to improve both our data integrity and our app's usability.

Let's now try it out for ourselves. To do so, we'll first have to define a number of users, and then we can play around with creating records and seeing who has access to what.