salesforce_security_impl_guide

Securing and Sharing Data
User Sharing Overview
• Click the Recalculate button for the sharing rules on the Sharing Settings page
• Recalculate your sharing rules on the Defer sharing page
You can monitor the progress of your parallel recalculation on the Background Jobs page or view your recent sharing operations on the
View Setup Audit Trail page.
Recalculation of sharing rules maintains implicit sharing between accounts and child records. In the Background Jobs page, these
processes corresponds to these job sub types:, Account — Extra Parent Access Removal and Account — Parent Access Grant.
Additionally, deleting a sharing rule corresponds to the job sub type Object — Access Cleanup, denoting that irrelevant share rows
are removed.
Note: For an in-depth look at record access, see Designing Record Access for Enterprise Scale.
User Sharing Overview
Control who sees who in the organization with standard sharing functionality.
EDITIONS
Watch a demo: Who Sees Whom: User Sharing
Available in:
Watch how you can set up User Sharing in your organization.
• Enterprise
• Performance
User Sharing enables you to show or hide an internal or external user from another user in your
• Unlimited
organization. For example, you might be a manufacturer who needs to include all dealers in your
• Developer
organization while still keeping them from seeing or interacting with each other. You can set the
organization-wide defaults for the user object to Private. Then, open up access among groups of
dealers who need to see and interact with each other in the organization with sharing rules or manual sharing.
With User Sharing, you can:
• Assign the “View All Users” permission to users who need to see or interact with all users. This permission is automatically enabled
for users who have the “Manage Users” permission.
• Set the organization-wide default for user records to Private or Public Read Only.
• Create user sharing rules based on group membership or other criteria.
• Create manual shares for user records to open up access to individual users or groups.
• Control the visibility of external users in customer or partner portals and communities.
See the Understanding User Sharing tip sheet for more information.
Understanding User Sharing
Set organization-wide defaults for internal and external user records. Then, extend access using
sharing rules based on membership to public groups, roles, or territories, or use manual sharing to
share individual user records with other users or groups.
When you enable user sharing, users can see other users in search, list views, and so on only if they
have Read access on those users.
Review these considerations before you implement user sharing.
“View All Users” permission
This permission can be assigned to users who need Read access to all users, regardless of the
sharing settings. If you already have the “Manage Users” permission, you are automatically
granted the “View All Users” permission.
EDITIONS
Available in:
• Professional
• Enterprise
• Performance
• Unlimited
• Developer
69