salesforce_security_impl_guide
salesforce_security_impl_guide
salesforce_security_impl_guide
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
Securing and Sharing Data<br />
“View All” and “Modify All” Permissions Overview<br />
“View All” and “Modify All” Permissions Overview<br />
The “View All” and “Modify All” permissions ignore sharing rules and settings, allowing administrators<br />
to quickly grant access to records associated with a given object across the organization. “View All”<br />
and “Modify All” may be preferable alternatives to the “View All Data” and “Modify All Data”<br />
permissions. Be aware of the following distinctions between the permission types.<br />
EDITIONS<br />
Available in all editions<br />
Permissions<br />
View All<br />
Modify All<br />
View All Data<br />
Modify All Data<br />
View All Users<br />
Used for<br />
Delegation of object permissions<br />
Managing all data in an organization;<br />
for example, data cleansing,<br />
deduplication, mass deletion, mass<br />
transferring, and managing record<br />
approvals<br />
Viewing all users in the organization.<br />
This permission grants you Read<br />
access to all users, so that you can see<br />
their user record details, see them in<br />
searches, list views, and so on.<br />
Users who Need them<br />
Delegated administrators who need<br />
to manage records for specific objects<br />
Administrators of an entire<br />
organization<br />
Users who need to view all users in<br />
the organization, especially if the<br />
organization-wide default for the user<br />
object is Private. Administrators with<br />
the “Manage Users” permission are<br />
automatically granted the “View All<br />
Users” permission.<br />
“View All” and “Modify All” are not available for ideas, price books, article types, and products.<br />
“View All” and “Modify All” allow for delegation of object permissions only. To delegate user administration and custom object<br />
administration duties, define delegated administrators.<br />
“View All Users” is available if your organization has User Sharing, which controls user visibility in the organization. To learn about User<br />
Sharing, see User Sharing Overview.<br />
Comparing Security Models<br />
Salesforce user <strong>security</strong> is an intersection of sharing, and user and object permissions. In some cases,<br />
such as in end-user record level access, it is advantageous to use sharing to provide access to records.<br />
In other cases, such as when delegating record administration tasks like transferring records, cleansing<br />
data, deduplicating records, mass deleting records, and delegating workflow approval processes,<br />
it is advantageous to override sharing and use permissions to provide access to records.<br />
The “Read,” “Create,” “Edit,” and “Delete” permissions respect sharing settings, which control access<br />
to data at the record level. The “View All” and “Modify All” permissions override sharing settings for<br />
specific objects. Additionally, the “View All Data” and “Modify All Data” permissions override sharing<br />
settings for all objects.<br />
The following table describes the differences between the <strong>security</strong> models.<br />
EDITIONS<br />
Available in:<br />
• Enterprise<br />
• Performance<br />
• Unlimited<br />
• Developer<br />
• Database.com<br />
34