Organization wide default so as part of the state's pool security model we know that there are three
levels of access.
One is the object level access record level access and the feel of Alexis as part of the object level
Alexis the already invested about profiles and permission.
And also we now know that Hulbert applies in the system and what impact it makes in that sense flexicurity
model.
So now it's time for us to get into that second level of access that does it.
Gardner Alexis as you can see here the record level access and Salesforce can be controlled by all these
different security strategies all the beauty and old hierarchy sharing rules manual shading manager
groups man men will use that record sharing the report visibility the community and both the levels
of visibility and finally access to the pipes types among these the most important ones are or the beauty
the hierarchy sharing rules and men Manuel shooting.
So before we get into all the beauty and understand the concept about old beauty let's do a quick recap
of all the object level access and that I call Alexis so object limit access but a white sea bass line
axis that is nothing that can provide more access than the object of a access an object of an axis.
Basically the profiles and low emission set that define the level of access that you have for you a
a class and record level axis that determines the level of axis that you have for the A class that you
do not own.
Basically are those in a class that is the main difference.
So as part of this record level axis let's understand about all beauty and how it makes any effect
organization wide default so all the beauty that does how it is generally reflected and that stands
for Organization wide defaults.
And as the term says it is organization wide meaning the auto beauty setting that we do and says force
that applies for all the uses in the organization unlike profiles and permission sets.
So profiles it is assigned to a user formation set is also assigned to a user.
But auto beauty does not assigned to a specific user but it is assigned to the whole organization as
such.
Say for example the auto beauty Florida some specific some custom object is private it means that for
all the users in the organization the auto beauty setting for that particular custom object will be
private.
So it does that organization wide level setting that is what is given here.
Administrators can use organization wide shedding settings to define the default sharing settings for
an organization meaning it applies to the whole org as we already discussed.
These four are the most important ways of controlling that regard level axis and says force or the beauty
old hierarchy shedding rules and manual shading so other is basically a pictorial representation of
how these four different methods are connected.
The most restrictive setting is the order beauty as you can see here Then comes an old hierarchy then
comes shedding rules.
Then comes manual shifting as the picture depicts all the beauty is the most restrictive setting in
hierarchy again still more open up access than all the beauty and if we use a shedding rules if we want
to stay more open up access already given by that old hierarchy and manual sharing we can use it but
still more expand access already given by sharing those old hierarchy.
So as the level goes up we basically use them to expand more access but always remember that that is
nothing that can level the access already given.
Say for example that all hierarchy cannot revoke the access already granted by all the beauty but all
had I can only be used to open up more access but not only will it the same rule applies for sharing
rules and manual sharing so on the other different methods of recording of Alexis can only open up more
access but not every walk.
Access already given by the other thugs.
This is the very basic concept that we need to be very clear about this forms the basis of understanding
about the entire security model.
OK so now we know how these are different the level of access is connected to each other.
Let's get into all the beauty.
So as we already discussed profiles information sets as part of the object level access they provide
the baseline access that is nothing that can grant more access than the profiles information sets and
all WTO that does the most of us ticked off sitting the whole hierarchy shifting rules manually sharing
all these can only grant more access but not deny access that is already provided by all the beauty.
Now let's quickly log into over a developer org and see how do we set up this.
Beauty.
So in other are political flash sharing settings it basically comes of security control.
So aren't those sharing settings the first thing that you'll see is organization wide de force so you
can see the order beauty is set for all the objects in Iraq.
Both the standard objects and the custom objects and you can also see the level of access that is given
for each of the object.
So there are many options out here.
Private public utility that I transfer.
I know there are many other options that we see 40 other objects and we also see the custom objects
that create.
Now let's begin to more about the level of access and what impact it has on the class.
There are many levels of settings that we have in order.
Beauty among those the most common or the beauty settings are private.
Public read only public read right and public transport.
These are the most common ones you see in any org any project.
However as a senior admin it is just not sufficient that we know about these most common settings.
Fee should have an in-depth knowledge about the various settings in fact on the settings that all beauty
has to offer because as you know that's what differentiates a senior I'd been from a beginner admin
has seen that admin should have a good understanding good knowledge about the various settings that
are available and sales force and also widget setting as applied to which object which at all the options
that are available for each object and what impact it has on that particular object.
So now let's again go back to our developer and see what all the various options available for the objects
and let's lump all of them so we are here.
The search for sharing settings and we are here and the order beauty defaults.
Edit And let's look at the various objects here and also the various options that are available for
all the objects so first comes lead.
You can see that float options available element private.
Public you'd only read write and read write transfer so we know that a record level axis defines the
access that we have wanted a class that we do not own.
Basically on those cards right and order beauty falls under the recording of Alexis Private.
Private meaning as the name says the records are private to every single user.
Meaning I can see my records you can see your records.
That's it.
We have no access to others in a class that is private so private.
Meaning we cannot access the records week.
We have absolutely no access to other records.
But this being all the beauty that a court access can be opened up by the hierarchy of the sharing rules
or the manual shedding as we already discussed.
But as part of the order beauty the setting is private meaning we have access only to our own records
and not others and it guards.
But if the second is public read only it means that we have only read access to others at a glance we
can read others in a class but not make any changes to it.
And publicly right as the name says that we have both read access and edit access to others at a class
publicly right grants.
So basically transfer this option is more available for leaves and cases than we generally transfer
to a leader a guard or transfer to gaze at a cocktail.
Another era maybe for a lead then be transferred to a different member and float cases.
Maybe we transfer that our to a different supporting member.
So in those cases we have this option of publicly direct transfer then and begin to transfer that a
class basically others at a glance to the front.
Listen so these are not for commonly used or WD settings.
Private that and we have Alexis Reed only we have only read only access to those archives.
Read right.
We have only read and write texts basically begin to read and also edit of those records that I transfer
began to read or write and also transfer records to another person.
So these are the four different commonly used or WD settings.
Now let's go to the other objects and see what all the other options that are available.
Icons and contracts.
Private public read only public read right.
We know about them.
Ana contorted by parent private public read only public read right on top of the commonly used audio
beauty setting.
We also have another setting that is called us control the light.
So what is controlled by parent controlled by parent means this object do not have all ability setting
off its own the auto beauty level of access for this particular object is determined by the level of
faxes that it's they had an object pass that is what it says controlled by patent you can see controlled
by parent options available for art of contact eye sets right.
You can see that option for context.
So the letter your faxes that they use it has on contact regards.
Basically other uses contact records is dependent on the level of access that particular use it has
on its building object that is a command object.
So for a found object the food is public food right then for contact object.
Also he would have publicly right if the icon object has private then for contact object.
Also he'd have private so basically controlled by Pan Into means.
This object does not have an independent the beauty sitting.
Rather it is dependent on expanding the object for its axis so that it is less controlled by parent.
You can see for art in object contact object as objects moving on.
Opportunity for opportunity to have public private public read only read write.
I'll give you a already discussed about these floodgates.
These options we have already discussed campaigns.
One important thing public full access other than the options that we have already discussed.
We see another option that describe this public full access.
So what does this public full access public full access means.
On top of that lead right trans for access users can also delete campaign records and the report on
the campaign like logs that disclosure less public full access.
So basically it gives a lead right transfer to delete and the report access on the camp records that
disclosed this public full access campaign members social campaign members have only two options one
is controlled by campaigns or control the late leader contact as the names say it's controlled by little
contact means only users who have access to leads a context they'll have access to this campaign members
at courts and control of the campaign means one legal axis only users who have access to the camp and
the will have access to their campaign member courts that is controlled by campaign for use as it is
private and public read only for activities private and controlled by parent control by parent.
Already discussed calendars hide details hide details and at events show details so these options basically
define the level of access that we have on other users calendar so high.
Details means we can have access to other uses calendar but then we can only see that if the other use
it is available or not at a particular time but what we cannot access is more information I like about
the nature of events the other uses calendar.
So basically we hide those details so though we can see that if a person is available or not we cannot
have other access so high details are at events in addition to the access that is given by hide details.
If this particular order beauty setting is set then it means that we can insert new evens in other uses
calendar so sure details.
So very much as the name says it will show the details.
It will show that if a person is available or not on top of it as long as the show details about the
nature of the events and sure details and at events on top of knowing that if a person is available
or not and also the nature of events we will be able to insert new evens into other deals us getting
it.
So these are the four options that are available for calendar and these options are pretty much only
available for calendar.
Not forget the objects moving on price book.
This is also important object to.
There are three options that are available for price book use view only access.
We should understand the difference between this or the beauty access available for price books.
Plus decimal axis as the name says users have absolutely no this ability to price books and obviously
they'll have no access to adding them blow opportunities.
So that does warn us no axis meaning they have no access to price books nexus view only as the name
says they have only viewable access to price books but they cannot basically add the price books to
opportunities unless more access is given to them by other means.
That does V1 meaning they have only read access to price.
The last option is use.
That is the maximum level of access that you can have on price books.
So basically this option users would be able to view price books assign the price books to opportunities
and also add products and price bookstore opportunities.
So these are the three different levels of portability access that we have on price book and coaching
pretty much the same options that we already discussed.
So I think the code.
Yeah.
So I think like we covered all of the different auto beauty settings that are available.
So I already mentioned private public read public read right rewrite transfer of the most common auto
duty setting.
But as a senior admin we should have a good knowledge about the various auto duty settings available
and for virtual objects that is available say for example this price book no access if you wanted to
use these are not available for other objects as is specifically available for the price book.
So be sure to have a good understanding about the different auto beauty settings and the level of impact
that that has on the cards and also for Victrola objects that not available.
So now that we have had a good understanding about the older beauty water all the different WD settings
and what level of access that it has no law let's do a quick exercise about that sort of beauty settings
and the different profile settings and their different combinations.
And one day a possible outcome can be because it says force the security on the levels axes that a person
has on others in a car that is basically is a combination of the that is provided by profiles permission
sets and all the beauty and also these other different methods offered at the level of access.
Now that we have learned about profiles in auto beauty let's try to understand the different combinations.
Say for example flight so C R E meaning the correct permissions create read edit and delete.
So April 5 reset the correct permissions for all the objects right.
And in order beauty V said the order beauty setting for the objects.
So now let's look with comparison.
The first scenario is for a particular object as part of the profile settings.
A user has got correct permissions let's say for example.
In any object any maybe we can consider the custom object that be created and you can also try replicating
the scenario and checking this that that's really a good way of learning this concept.
I'm just giving you the various scenarios and how it affects the outcome.
So fullest scenario is in profiles we have the correct permissions for a particular object but all beauty
setting is private.
So what it means.
It means that we have all the permissions that are available for auto and neglect.
So if I created a god I can created a card reader a card that I can't tell you that at cards.
However for all those cards I have absolutely no Lexis scenario number look to as part of profiles.
How only see and create and read and the order beauty setting is still private meaning I can create
my own records.
I can read my own records but I cannot edit my own records.
I cannot delete to my records and for others records.
I have absolutely no permissions and if profile is SEO EDI all the permissions and order beauty setting
is public read only I have got all the access for my own records and for those records I can only view
that at glance.
I cannot edit to delete them
and if profile provides an Lexis means like none of the check boxes I checked and all the beauty this
public read only so this is a tricky scenario.
So in this scenario though the order beauty setting is public record only we cannot access others in
a closed zone.
Why.
Because profiles provide the baseline access that is nothing that can grant more access than profiles
so for profiles we do not have any access on that object.
So does the order beauty setting is public only.
We have absolutely no access on that particular object class.
In fact if profile provides no access this ought to be dissecting it doesn't matter in our body.
All right.
Because there is no access given bipedal flies.
So obviously those object requests cannot be access to
the Nixon ideal this little fight provides the maximum for emissions and all the beauty is publicly
right.
Basically the maximum access so far of my own records I have all access and for all those guards I have
read and write all records.
And see I see odd meaning only create and read and order beauty is publicly right.
So far my own records I can create my records I can read my records and for others at a glance I can
read records but can I dig them.
No I can't dig them because the edit option is not available in full files so profiles provide a baseline
access as little files do not give me the Axis door WP gives me the indexes it doesn't apply so these
are some of the various scenarios that we have considered combining the full file options on the order
bloody options and it could be definitely a very good learning experience for you want to replicate
this and ideally never develop a drug and see it called the different level of access that we have.
You can take any example for example if it is private data for this public lead only.
Many times like what happens is like you would not be able to see those new buttons the edit button
the delete button those buttons would not be available and even if those buttons are available once
you feed them you just say that you do not have privileges so try it out.
That could be a good learning experience.