We are in our infancy for FSC and I am wondering if there are best practices or suggestions on how to restrict visibility to employee financial accounts? In our core system only manager or users that have access to restricted accounts can see employee accounts so I would like some guidance on how to accomplish the same in Salesforce either via RecordTypes or other means.
Hi there,
Our requirements were that you could see the employee account record but sensitive information like balances were masked. To do this we created a custom employee field on both account and fin account. The purpose of having it on account was so that employees would be able to see the reason the balances were masked was because it was an employee. We then created a permissions set called 'see employee information' which allowed users to access sensitive areas of layouts. We then updated our LPs on Account (because they have the roll-ups) to only show if the field were employee + see employee information perm was on the person or employee was false. Finally, we updated the OWD on Fin Account to View Only (since all our Fin Accounts are owned by non-person records, this effectively masks all of them.)
We then created a restriction rule on Financial Account based on the field and permissions set, which shows all accounts were the perm is false and the employee = false.
Hence, we locked it down and then opened it back up.
With the way we have ownership on Fin Accounts, there are no issues with recalcs. When a person is no longer an employee the CORE data updates the data in FSC, but it has minimal impact on performance.
I would not recommend record types, as that would be overly complex and get messy as people onboard that are customers, or those that offboard that are customers.