28.2k views
1 vote
Do profiles override org's sharing model or role hierarchy?

User Jau L
by
8.3k points

1 Answer

1 vote

Final answer:

Profiles do not override the org's sharing model or role hierarchy in Salesforce; instead, they work within these frameworks to define a user's access rights. Profiles set object-level permissions and system privileges, while sharing models and role hierarchies govern record-level access. Permission sets are recommended for finer control over user permissions without creating multiple profiles.

Step-by-step explanation:

In Salesforce, profiles and the organization's sharing model along with the role hierarchy work together to determine a user's access rights to records. A profile in Salesforce is a collection of settings and permissions that determine what a user can see and do within the Salesforce org. Profiles are used to grant object-level permissions, field-level security, and other access rights such as system permissions and page layouts.

The org's sharing model specifies how records are shared across the organization and can include settings like Public Read Only, Public Read/Write, or Private. In addition, role hierarchies are designed to share record access within a role or subordinates in an organization. However, it is important to understand that profiles do not override the organization's sharing model or role hierarchy; rather, they work within these frameworks to provide a base level of access, while the sharing rules and roles enable additional access as defined.

If I were to recommend a different structure for an org's profile, I would suggest considering the creation of permission sets for finer control. Permission sets allow admins to grant additional permissions on top of what's defined in a profile without having to create multiple profiles for slight variations in access rights. This provides flexibility and maintainability in managing user permissions.

User Sahutchi
by
8.3k points