Sharing Settings

Organization-Wide Defaults (Open Sales)

Design

User Story

As a Salesforce End User
I want to be able to view/create/edit Lead, Contact, Account and Opportunity records
So that I can work on all records in the system
 
Note: The system will have a liberal policy where all users can see and edit all records.

Acceptance Criteria

Given an active user wants to manage the records for the ones that user does not own
When a role has been assigned to user/ sharing settings are configured
Then users will be able to manage each other's records based on the permissions granted to them via profiles as well as the role hierarchy within the system

Build

Navigate to Setup> Security> Sharing Settings

Object	Default Internal Access	Default External Access	Grant Access Using Hierarchies
Lead	Public Read/Write/Transfer	Private	True
Contact	Controlled by Parent	Private	True
Account	Public Read/Write	Private	True
Opportunity	Public Read/Write	Private	True

Test

Steps:

Step 1 example
Step 2 example

Expected Results:

Expected result example

Sharing Rules

Sharing Rule - Based on record owner

Label: Object Sharing Rule
Rule Name: default
Description: Object Sharing Rule

Rule Type: Based on Record Owner
Owned by members of: Publix Group x | Role y | Role and Subordinates z

Share with: Public Group x | Role y | Role and Subordinates z

Access Level: Read Only | Read/Write

Sharing Rule - Based on criteria

Label: Object Sharing Rule
Rule Name: default
Description: Object Sharing Rule

Rule Type: Based on criteria
Criteria:

- Field: field x | record type y | etc.
- Operator: Equals
- Value: 'a'
- Field: field y
- Operator: Equals
- Value: 'b'

Filter Logic: none/default | 1 OR 2 | etc.

Share with: Public Group x | Role y | Role and Subordinates z

Access Level: Read Only | Read/Write

Account Sharing Rule - Based on criteria

ℹ️

Account sharing rules have the special ability to control the access of child objects such as Contacts, Opportunities, and Cases. 'Contact Access' will is not configurable if set as 'Controlled by Parent'

Label: Account Sharing Rule
Rule Name: default
Description: Account Sharing Rule

Rule Type: Based on criteria
Criteria:

- Field: field x | record type y | etc.
- Operator: Equals
- Value: 'a'

Filter Logic: none/default | 1 OR 2 | etc.

Share with: Public Group x | Role y | Role and Subordinates z

Resources

Navigate to Setup> Security> Sharing Settings

Object	Default Internal Access	Default External Access	Grant Access Using Hierarchies
Lead	Public Read Only	Private	True
Contact	Public Read Only	Private	True
Account	Public Read Only	Private	True
Opportunity	Public Read Only	Private	True