salesforce_security_impl_guide

Securing and Sharing Data
Sharing User Recods
The default external access must be more restrictive or equal to the default internal access.
4. Click Save.
Users have Read access to those below them in the role hierarchy and full access on their own user record.
Sharing User Recods
Sharing your user record enables other users to see you in the organization.
You can share external user records, such as external community users and customer portal or
partner portal users. You can also share an internal user record with an external user.
Your administrator defines your organization’s sharing model and default access levels for user
records. You may want to extend sharing privileges for your own user record if the organization-wide
default access is set to Private or Public Read Only. Note that you cannot restrict access below your
organization’s default access levels.
To view and manage sharing details, click Sharing on the user detail page. The Sharing Detail page
lists the users, groups, roles, and territories that have sharing access to the user record. On this page,
you can perform these tasks:
• To show a filtered list of items, select a predefined list from the View drop-down list, or click
Create New View to define your own custom views. To edit or delete any view you created,
select it from the View drop-down list and click Edit.
• Grant access to the record for other users, groups, roles, or territories by clicking Add. This
method of granting access is also known as manual sharing of your user records.
• Edit or delete the manual share by clicking Edit or Del next to the rule.
An administrator can disable or enable manual user record sharing for all users.
Restoring User Visibility Defaults
User Sharing enables you to control who sees who in the organization. You can restore your defaults
if you have previously used User Sharing.
To restore user visibility defaults:
1. From Setup, click Security Controls > Sharing Settings.
2. Set the organization-wide defaults to Public Read Only for internal access and Private for external
access.
3. Enable portal account user access.
On the Sharings Settings page, select the Portal User Visibility checkbox. This option enables
customer portal users to see other users under the same portal account. Additionally, partner
portal users can see the portal account owner.
4. Enable network member access.
On the Sharing Settings page, select the Community User Visibility checkbox. This option
enables community members to be seen by all other users in their communities.
EDITIONS
Available in:
• Professional
• Enterprise
• Performance
• Unlimited
• Developer
USER PERMISSIONS
To view user records:
• “Read” on user records
EDITIONS
Available in:
• Enterprise
• Performance
• Unlimited
• Developer
USER PERMISSIONS
To restore user visibility
defaults:
• “Manage Sharing”
5. Remove user sharing rules.
On the Sharing Settings page, click Del next to all available user sharing rules.
6. Remove HVPU access to user records.
71