Security and the Sharing Model

Salesforce Platform FoundationsSecurity and the Sharing ModelThe complete Salesforce security model, layer by layer: authentication, profiles, permission sets and groups, object and field permissions, org-wide defaults, role hierarchy, sharing rules, teams, territories, implicit and Apex managed sharing, restriction and scoping rules, debugging access, and Shield.Intermediate · about 80 minutesWhat you will learn

Describe the security layers (org, object, field, record) and how they combine

Design access with permission sets, permission set groups and muting, keeping profiles minimal

Choose org-wide defaults and open access with role hierarchy, sharing rules, teams, territories and manual sharing

Implement Apex managed sharing with custom row causes and recalculation

Use restriction rules and scoping rules appropriately and understand sharing recalculation and group membership locking

Debug 'why can (or can't) this user see this record' with the Sharing Hierarchy and UserRecordAccess

Explain what Shield (Platform Encryption, Event Monitoring, Field Audit Trail) adds

Contents

The layers of the security model

Org-level security: authentication and sessions

Object and field access: profiles, permission sets and groups

Record access: the sharing model

Sharing recalculation and group membership locks

The bridge to Apex: sharing keywords and user mode

Debugging access: "why can (or can't) they see it?"

Salesforce Shield

Worked example: securing the training app

Best practices

Common pitfalls

Hands-on exercises

Key takeaways