Record access Vs Profile permission - What takes precedence?

Question

Hi,

I have User A who is the owner of the opportunity and User B is manager of User A. User B's profile does not give me edit permission to the opportunity. Will User B be able to modify User A's opportunity as its shared by role heirarchy?

Thanks,

Mihir

Mayank Srivastava · Accepted Answer

Hey Mihir,

As a golden rule of thumb, Profile permissions decide what a user can or cannot do with a record in CRUD terms. So if User B's profile doesn't grant Edit permission to the Opportuntiy object, no form of sharing settings (Like Role hierarchy, sharnig rules, manual sharing, OWD) can give him broader access.

Only a Profile or a Permission Set can do that.

sugan karthik · Answer

No, Profiles provide you object level access and roles provide you the record level access, you first need to have the access to an object in-order to view the records pertaining to that object.   If user B has just view (and not edit) permissions on Opportunity, he will not be able to edit any opportunity irrespective of the role hierarchy.

Record access Vs Profile permission - What takes precedence?

Security

관련 학습

도움 더 받기