GrowEstate - Data Security
Overview
Org-Level, Object-Level, Field-Level,
and Record-Level Security
1. Org-Level Security
• • Controls access to the entire Salesforce
organization
• • Implemented via Login Access Policies,
Password Policies, and Licenses
• • Example: Only authorized users with
Salesforce licenses can log in
2. Object-Level Security (Profiles &
Permission Sets)
• • Defines access to specific objects
• • Example Profiles:
• - Agent: Limited CRUD on Clients, Properties,
Deals
• - Manager: Full CRUD on Clients, Properties,
Deals
• - Finance: CRUD on Payments, Read
Deals/Clients
• - Legal: CRUD on Agreements, Read
Deals/Clients
3. Field-Level Security
• • Restricts access to sensitive fields within
objects
• • Example:
• - Agents: Can view Client Email & Phone
• - Budget & Notes restricted from Agents
• • Managers, Finance, and Legal see more
sensitive data
4. Record-Level Security
• • Uses OWD, Sharing Rules, and Manual
Sharing
• • OWD (Org-Wide Defaults): Controls baseline
access
• • Sharing Rules: Extend access (e.g., Agents →
Managers)
• • Manual Sharing: Users share records
temporarily
5. Example Sharing Rules
• • Clients: Agents → Managers (Read/Write)
• • Properties: Active Properties shared with
Agents
• • Deals: Agents → Finance (Read Only), Agents
→ Managers (Read/Write)
• • Agreements: Agents/Managers → Legal
(Read/Write)
• • Payments: Agents/Managers → Finance
(Read/Write)
6. Manual Sharing
• • Agents can share Client/Property records
with other agents
• • Managers can share Agreements with Legal
• • Finance can share Payment records with
Managers for approval

GrowEstate_Data_Security. Salesforce pptx

  • 1.
    GrowEstate - DataSecurity Overview Org-Level, Object-Level, Field-Level, and Record-Level Security
  • 2.
    1. Org-Level Security •• Controls access to the entire Salesforce organization • • Implemented via Login Access Policies, Password Policies, and Licenses • • Example: Only authorized users with Salesforce licenses can log in
  • 3.
    2. Object-Level Security(Profiles & Permission Sets) • • Defines access to specific objects • • Example Profiles: • - Agent: Limited CRUD on Clients, Properties, Deals • - Manager: Full CRUD on Clients, Properties, Deals • - Finance: CRUD on Payments, Read Deals/Clients • - Legal: CRUD on Agreements, Read Deals/Clients
  • 4.
    3. Field-Level Security •• Restricts access to sensitive fields within objects • • Example: • - Agents: Can view Client Email & Phone • - Budget & Notes restricted from Agents • • Managers, Finance, and Legal see more sensitive data
  • 5.
    4. Record-Level Security •• Uses OWD, Sharing Rules, and Manual Sharing • • OWD (Org-Wide Defaults): Controls baseline access • • Sharing Rules: Extend access (e.g., Agents → Managers) • • Manual Sharing: Users share records temporarily
  • 6.
    5. Example SharingRules • • Clients: Agents → Managers (Read/Write) • • Properties: Active Properties shared with Agents • • Deals: Agents → Finance (Read Only), Agents → Managers (Read/Write) • • Agreements: Agents/Managers → Legal (Read/Write) • • Payments: Agents/Managers → Finance (Read/Write)
  • 7.
    6. Manual Sharing •• Agents can share Client/Property records with other agents • • Managers can share Agreements with Legal • • Finance can share Payment records with Managers for approval