Hello. On the Account Object we have a record type labeled 'Vendor'. We only want a group of users to have edit access to the fields for any of our vendor accounts. What is the best approach to achieve this?
Please let me know if further details are needed.
Eric Praud (Activ8 Solar Energies) 
Forum Ambassador
Ok, thanks for the details.
First, only assign record types to the right profiles/permission sets and make sure they do not have extra permission (perm sets or on their profiles) with the other record type. This will give them the ability to create records with this specific record type only.
Now, in the Sharing settings, make sure the Account object is set to Private in the Org-wide default section
Create the following sharing rules on Accounts (all of them criteria based):
1- Criteria: Record type equals vendor
Share with group 'FF- Vendor Accounts Record Type - PA*'
Access Read/Write
2- Criteria: Record type equals vendor
Share with group All Internal users
Access Read only
If you want every one to be able to create/edit the Client record type, then add a sharing rule:
Record type equals Client
Share with group All Internal users
Access Read/Write
Otherwise, do the same sharing rules for CLient as you did for Vendor (maybe changing the group name)
