In my org I need to give access to delete the opportunity record for the record owner and the user who is lying above the owner level in role hierarchy. In order to acheieve this using profile there are many users in the profile who are not the owner of the opportunity record. What is the best way to do that, Do I need to create permission set with delete access and assign it to all the opportunity owners and the users above the owner level in role hierarchy. Can someone please suggest me on this?
답변 3개
to give delete access to Profile for Higher-Level Users:
- You can give delete access to higher-level users by adding the delete permission on the Opportunity object in their profile.
- This will allow them to delete Opportunity records owned by users below them in the role hierarchy.
- Ensure that Grant Access Using Hierarchies is enabled for the Opportunity object (this is the default setting), so they inherit visibility and can act on records owned by those below them.
Permission Set Option (if profiles are shared across different roles):
- If the higher-level users share profiles with other users who should not have delete access, create a Permission Set with Delete access on the Opportunity object.
- Assign this permission set only to the users at the higher level in the hierarchy. This will allow them to delete records owned by users below them.