Shared with higher role hierarchy?

Question

OWD for Account is Private. If I share an account with another user will the record be visible to user's manager and above?

Manual Sharing
Apex Sharing
Sharing Rule ( using share with Roles & subordinates)
Account teams

Grant using hierarchies for Account can't be unchecked in OWD due to standard object restriction.

Lawrence Newcombe · Accepted Answer

@Deepti Mendiratta https://trailblazers.salesforce.com/profileView?u=0053A00000CrxTJQAZ  yes users in roles above the role of the user the record is shared with will get access too, even with manual and apex sharing.    Behind the scenes this uses system-defined groups created for each role which contain all users with the role as well as all users with a parent role in the hierarchy. You can't query these directly, but there's more info on how they work in the Group Maintainence section from Record Access Under the Hood:  https://developer.salesforce.com/docs/atlas.en-us.salesforce_record_access_under_the_hood.meta/salesforce_record_access_under_the_hood/uth_groups.htm

Arun Goel · Answer

@Deepti Mendiratta https://trailblazers.salesforce.com/profileView?u=0053A00000CrxTJQAZ , Yes, when you share an Account with a user, it is also automatically shared with that user’s manager and managers above them (role hierarchy).    This is because:  -Grant Access Using Hierarchies is enabled and locked ON for standard objects like Account.  -Any record access granted to a user (through manual sharing, Apex sharing, Account Teams, etc.) will cascade upward to users higher in the role hierarchy.    And for your follow-up question:  Yes, even if only the user is explicitly listed in the AccountShare table, their managers and above (based on Role Hierarchy) will still gain implicit access — even though no explicit share row exists for them.

Shared with higher role hierarchy?

Ladies Be Architects

さらにヘルプを表示