salesforce_security_impl_guide

Securing and Sharing Data
Comparing Security Models
Target audience
Where managed
Record access levels
Ability to transfer
Ability to approve records, or edit and
unlock records in an approval process
Ability to report on all records
Object support
Group access levels determined by
Private record access
Ability to manually share records
Ability to manage all case comments
Permissions that Respect Sharing
End-users
“Read,” “Create,” “Edit,” and “Delete” object
permissions;
Sharing settings
Private, Read-Only, Read/Write,
Read/Write/Transfer/Full Access
Respects sharing settings, which vary by
object
None
Available with a sharing rule that states: the
records owned by the public group “Entire
Organization” are shared with a specified
group, with Read-Only access
Available on all objects except products,
documents, solutions, ideas, notes, and
attachments
Roles, Roles and Subordinates, Roles and
Internal Subordinates, Roles, Internal and
Portal Subordinates, Queues, Teams, and
Public Groups
Not available
Available to the record owner and any user
above the record owner in the role hierarchy
Not available
Permissions that Override Sharing
Delegated data administrators
“View All” and “Modify All”
“View All” and “Modify All”
Available on all objects with “Modify All”
Available on all objects with “Modify All”
Available on all objects with “View All”
Available on most objects via object
permissions
Note: “View All” and “Modify All”
are not available for ideas, price
books, article types, and products.
Profile or permission sets
Available on private contacts, opportunities,
and notes and attachments with “View All”
and “Modify All”
Available on all objects with “Modify All”
Available with “Modify All” on cases
35