Access to Records39% of the exam
Role hierarchy and Grant Access Using Hierarchies
How the role hierarchy opens access upward at the subordinate's level, when Grant Access Using Hierarchies can be turned off, what role access fields give account owners, how to design branches and role counts, and which role sharing groups a sharing rule can target.
Given a set of conditions, recommend a solution that leverages the role hierarchy to support the record access requirements.
~8 min read · 13 practice questions ·
What the exam expects
- Predict who above a user gains access to a record the user owns or was shared, and at what level.
- Decide when to deselect Grant Access Using Hierarchies, and who still sees the records afterwards.
- Explain the Opportunity, Case and Contact Access role fields and what happens to an account owner without a role.
- Design branches, the top of the hierarchy and the role count from current access needs.
- Pick the right role sharing group as a sharing-rule target, and tell roles from territories.
Key terms: role hierarchy (roles that open access upward); Grant Access Using Hierarchies (the per-object switch for that access); role sharing group (a system group per role); branch (a sub-tree that segregates a unit); shared person role (the one role Account Role Optimization gives a lone external user).
Key facts
Level inherited
- Detail
- Same as the subordinate's on standard objects
Grant Access Using Hierarchies
- Detail
- Editable for custom objects only
Setting off
- Detail
- Group Member still gains; Manager of Group Member doesn't
Owner without a role
- Detail
- Contacts Read/Write; opportunities and cases No Access
Contact Access field
- Detail
- Hidden when Contact is Public Read/Write or Controlled by Parent
Role limits
- Detail
- 5,000 (Spring '21 or later); 500 before, raisable by Support
Role and Subordinates
- Detail
- Deprecated group
Sources for this section (5)
- Platform Sharing Architecturearchitect.salesforce.com (opens in a new tab)
- Controlling Access Using the Role Hierarchyhelp.salesforce.com (opens in a new tab)
- Guidelines for Success with Roleshelp.salesforce.com (opens in a new tab)
- Role Fieldshelp.salesforce.com (opens in a new tab)
- Role and Territory Sharing Groupshelp.salesforce.com (opens in a new tab)
- When do users above a subordinate not gain access to a record shared with the subordinate?
- Why would a role's edit page show no Case Access field?
- Why should a new sharing rule avoid the Role and Subordinates group?
- Which hierarchy shape keeps peers in one role from seeing each other yet lets a parent role see all?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the Platform Sharing and Visibility Architect pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 21 lessons of the Platform Sharing and Visibility Architect guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Inline practice questions and one-click topic practice (13 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Unlimited timed practice exams