Apex Global Logistics uses a custom object named Vendor_Evaluation__c to conduct performance reviews on third-party suppliers. Business policy mandates that general employees must only be able to view and edit Vendor_Evaluation__c records that they personally own. However, managers must automatically gain access to all evaluation records owned by their subordinates in the role hierarchy. Which configuration should the administrator implement to satisfy these access requirements?
- Set the Organization-Wide Default (OWD) for Vendor_Evaluation__c to Private, and leave the Grant Access Using Hierarchies checkbox selected.Answer
- BSet the Organization-Wide Default (OWD) for Vendor_Evaluation__c to Private, and deselect the Grant Access Using Hierarchies checkbox.
- CSet the Organization-Wide Default (OWD) for Vendor_Evaluation__c to Public Read-Only, and assign a Permission Set to restrict viewing access for non-owners.
- DCreate a Profile that restricts view access to records owned by other users, and assign this profile to all non-manager employees.
Answer
Set the Organization-Wide Default (OWD) for the custom object to Private while keeping the 'Grant Access Using Hierarchies' setting enabled.
Setting the Organization-Wide Default (OWD) to Private restricts baseline record access so users can only view and edit records they own. For custom objects, the 'Grant Access Using Hierarchies' option is checked by default, which ensures that managers higher in the role hierarchy automatically inherit access to records owned by their direct and indirect reports.
Step-by-Step Solution
Key Concept
Organization-Wide Defaults (OWD) and Role Hierarchy Access