Salesforce Security Guide

Salesforce Security Guide
Salesforce Security Basics
Authenticate Users
Give Users Access to Data
Share Objects and Fields
Field-Level Security
Sharing Rules
Sharing Rule Types
Create Owner-Based Sharing Rules
Create Criteria-Based Sharing Rules
Create Guest User Sharing Rules
Sharing Rule Categories
Edit Sharing Rules
Sharing Rule Considerations
Recalculate Sharing Rules
Asynchronous Parallel Recalculation of Sharing Rules
User Sharing
What Is a Group?
Manual Sharing
Organization-Wide Sharing Defaults
Strengthen Your Data's Security with Shield Platform Encryption
Monitoring Your Organization’s Security
Real-Time Event Monitoring
Security Guidelines for Apex and Visualforce Development
PDF

Newer Version Available

This content describes an older version of this product. View Latest

Create Owner-Based Sharing Rules

An owner-based sharing rule opens access to records owned by certain users.
Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience
Available in: Professional, Enterprise, Performance, Unlimited, and Developer Editions

User Permissions Needed
To create sharing rules: Manage Sharing
  1. If you plan to include public groups in your sharing rule, confirm that the appropriate groups have been created.
  2. From Setup, in the Quick Find box, enter Sharing Settings, then select Sharing Settings.
  3. In the Sharing Rules related list for the object, click New.
  4. Enter the label name and rule name. The label name appears on the user interface. The rule name is a unique name used by the API and managed packages.
  5. Optionally, enter a description of the sharing rule, up to 1,000 characters.
  6. For the rule type, select Based on record owner.
  7. Specify which users’ records are shared. For owned by members of, select a category from the first dropdown list and a set of users from the second dropdown list or lookup field.
  8. Specify the users who get access to the data. For Share with, select a category from the first dropdown list and a set of users from the second dropdown list or lookup field.
  9. Select sharing access settings for users. Some access settings aren’t available for some objects or in some situations.
    Access Setting Description
    Private Users can’t view or update records, unless access is granted outside of this sharing rule.

    Available only for associated contacts, opportunities, and cases.
    Read Only Users can view, but not update, records.
    Read/Write Users can view and update records.
    Full Access Users in the selected group, role, or territory can view, edit, transfer, delete, and share the record, just like the record’s owner.

    With a Full Access sharing rule, users can also view, edit, delete, and close activities associated with the record if the org-wide sharing setting for activities is Controlled by Parent.

    Available for campaigns only.

    Contact Access isn’t available when the organization-wide default for contacts is set to Controlled by Parent.

    Note

  10. Click Save.