Hi,
We have created several objects linked to Account. Those objects contains sensitive data that should be available only for the account team/account owner and hierarchy.
How can I do that, knowing Account are public read shared ?
I have tried with restriction rules, with public group but it's too much work..
It's there any to plan to add a "is account member/is opportunity member" to the restriction rule conditions ?
Thanks
Hello @Claudio BERNARDES, in this situation I would create "Lookup" Account relationship fields in the objects related to the Account. This will allow you to set the Sharing Settings to "Private", and also check the box "Grant Access Using Hierarchies".
Once this is done, you need to create a set of record-triggered flows (both on the "Account" and "Account Team Member" objects), which will create/delete "Share Records" to the relevant child records in the case the Owner of the Account changes, or if Account Team Members are added/deleted. These flows are the ones going to automate the visibility of the records only to the Account Team Members / Account Owners (and because you have the "Grant Access Using Hierarchies" checked in "Sharing Settings", the users above in the hierarchy will also have access to the records).
Here is an example of automating sharing of Case Records: https://www.linkedin.com/pulse/automate-sharing-records-salesforce-using-flow-alekhya-mandadi/
In your scenario, you will need to create the "share" records for the child records based on changes that have happened on the Account / Account Team Members, but the idea is the same.
Let me know if you need any clarification.
Hope this helps!
