I've created a HR App in a Sandbox that includes the following Custom Objects:
- Roles
- Applicants/Recruitment Pipeline
- Candidates
- Interviews
- Training Courses
- Training Records
- Team Members
- Staff Vacations
What's best practice with regards to restricting particular users to particular objects, records and fields? Being a HR App, there will be confidential information, in particular within the Team Member object (salary, sickness records). I want to restrict certain objects, fields and records to particular user accounts. Would I be best using a Hierarchy or cloning Standard Users, creating user groups and then restricting them per individual user?
Help is appreciated.
Regards.
Jack.
@Daniel Gorton Brilliant advice re drawing out the security pieces. This is how I went about the initial data access review of who should be able to read, edit, view etc. Definitely helped when it came to building the permissions/access in my Sandbox.
