Question

For objects where data access is granted through the role hierarchy, how is access granted?

1) Users are only granted read access to data owned by users above them in the role hierarchy
2) Users are granted access to data accessible by users in the same role in the role hierarchy
3) Users are only granted access to data owned by users below them in the role hierarchy
4) Users are granted access to data accessible by users below them in the role hierarchy

Answer 1

The correct answer for data access in role hierarchies is that users are granted access to data accessible by users below them. Managers and supervisors can see and edit data owned by or shared with their subordinates.

Step-by-step explanation:

For objects where data access is granted through the role hierarchy, users are granted access to data owned by or shared with users below them in the role hierarchy. This implies that, contrary to option 1 and option 3, it is the inverse; users in higher roles can access data for which users in roles beneath them have access rights. This typically includes both read and edit permissions, subject to the organization's sharing settings and permissions. However, peers within the same role do not necessarily have access to each other's data solely based on the role hierarchy, which rules out option 2.

Thus, the correct answer is option 4: Users are granted access to data accessible by users below them in the role hierarchy. In practical terms, this means that if a manager and a direct report are in a role hierarchy, the manager will have access to records owned by the direct report, but not vice versa, unless additional sharing rules are implemented to allow that.