
I am using a Hiring Manager (permission set) on a Standard Employee (Profile),
looking to give: Create Read Edit - Access to Records of Position(custom object), such that:
Only those Position Records to which the Hiring Manager has been assigned are displayed.
1. I have created User: Ben Holder
2. Assigned him to Profile: Standard Employee
3. Added him to Permission Set: Hiring Manager
4. Position Object OWD set to Private.
5. Created Role: Hiring Manager, assigned to the user above
6. I have created Position Records; logged in from Admin.
However, now when I log in as Ben Holder, I can see all Position Object Records created ever!
Can someone help me please?
hi Abhra,
I think you should be clear about roles and permission sets here . As far as I have learnt on trailhead modules ( i am not a very experienced learner here) , Roles are not always clear in a company ( for the purpose of record sharing ) , so they use " groups" instead .
Moreover , permission sets are used to give object/field level security ,not record level security !!
Now in your situation , if a role ( of hiring manager )is explicitly defined , then please clarify if the hiring manager wants read/write access on those records only where he himself is the manager ? any other situation changes the way we define sharing rules