One of our top customers is insisting on stricter security for their information. One way management can see this happening is by creating a Permission Set so only Users with this Permission Set can see the customer's Objects (Account, Contacts, Cases, Assets, Opportunities etc). Leaving those Users without this special Permission Set to see all other Objects.
The native levels of data access for Objects or Records seem targeted to be broader sweeps (i.e. a User can't edit any Opportunity). This is too crude. I need a more targeted access control to meet management's requirements.
I wondered if Restriction Rules could be set up to sequester this picky customer's Objects and give access only to select Users.
Has anyone done this before? Is there an article anywhere on how to set this up?
#Restriction Rules #Object Permissions #Security #User Management #Data Management
Forum Ambassador
Eric Burté (DEVOTEAM)Hello @Emma Taylor, just for information, that may have been a good option... but restriction rules are not available yet for accounts/contacts ; it is only available for custom objects, external objects, contracts, events, tasks, time sheets, and time sheet entries.
https://help.salesforce.com/s/articleView?id=sf.security_restriction_rule_create.htm&type=5
Playing with OWD or muting permissions will concern all records of the private/muted object. you may handle field-level permissions but that requires to track all fields.
That means you should still probably play OWD + sharing rules.
Eric
