Skip to main content
Rohit . (360 Cloud Solution) 님이 #Security에 질문했습니다

Business Requirement    HR users can access all Employee records.    Managers should only see Employees in their own Location.    

답변 2개
  1. 9월 4일 오전 4:34

    Hi @Rohit .

     

    Restriction Rules alone won’t satisfy this requirement, as they can only restrict existing access, not grant access.  

     

    A better approach would be: 

    •  Set OWD to Private for Employee. 
    •  Give HR users access to all Employee records using appropriate sharing or View All permission. 
    •  Give Managers access to employees in their own Location using criteria-based sharing or Apex Managed Sharing for dynamic requirements. 

    Use sharing mechanisms to grant access, and Restriction Rules only when additional record-level restriction is required. 

     

    Hope This Helps!! 

0/9000