salesforce_security_impl_guide

Securing and Sharing Data
Roles Overview
On the Customer Portal Setup page, click Del next to all available sharing sets for HVPUs.
After user visibility is restored to the defaults, all internal users are visible to each other, portal users under the same portal account are
visible to each other, and community members in the same community are visible to each other.
Roles Overview
Salesforce offers a user role hierarchy that you can use together with sharing settings to determine
the levels of access users have to your organization’s data. Roles within the hierarachy affect access
on key components like records and reports.
Watch how you can open up access to records using the role hierarchy if your
organization-wide defaults are more restrictive than Public Read/Write.
Who Sees What: Record Access via the Role Hierarchy
EDITIONS
Available in:
• Professional
• Enterprise
• Performance
• Unlimited
• Developer
• Database.com
Depending on your organization’s sharing settings, roles can control the level of visibility that users
have into your organization’s data. Users at any given role level can view, edit, and report on all
data owned by or shared with users below them in the role hierarchy, unless your organization’s
sharing model for an object specifies otherwise. Specifically, in the Organization-Wide Defaults
related list, if the Grant Access Using Hierarchies option is disabled for a custom object, only the
record owner and users granted access by the organization-wide defaults receive access to the
object's records.
USER PERMISSIONS
To create, edit, and delete
roles:
• “Manage Roles”
To assign users to roles:
• “Manage Internal Users”
About Groups
Groups are sets of users. They can contain individual users, other groups, the users in a particular
role or territory, or the users in a particular role or territory plus all of the users below that role or
territory in the hierarchy.
There are two types of groups:
• Public groups—Only administrators can create public groups. They can be used by everyone
in the organization.
• Personal groups—Each user can create groups for their personal use.
You can use groups in the following ways:
• To set up default sharing access via a sharing rule
• To share your records with other users
• To specify that you want to synchronize contacts owned by others users
• To add multiple users to a Salesforce CRM Content library
• To assign users to specific actions in Salesforce Knowledge
EDITIONS
Available in:
• Professional
• Enterprise
• Performance
• Unlimited
• Developer
• Database.com
Public Group Considerations
For organizations with a large number of users, consider these tips when creating public groups to optimize performance.
72