Zenith Wealth Management enforces a Private Organization-Wide Default (OWD) sharing model for Opportunities. A Salesforce administrator configures an executive performance dashboard stored in a shared folder accessible by all Sales Managers. The dashboard's running user is statically set to the Chief Commercial Officer (CCO). When a Sales Manager views the dashboard component, it displays 4,500,000 in pipeline value. Which statement explains the primary cause of this discrepancy?
- The dashboard component calculates results using the record-level security of the static running user, while the source report executes using the security context of the logged-in user.Answer
- BThe underlying source report automatically converts to a dynamic report filter, which removes records outside the Sales Manager's immediate role hierarchy branch.
- COpening a static dashboard component temporarily grants View All access to the component summary, but the access revokes as soon as the user navigates away from the dashboard.
- DThe shared folder containing the dashboard grants View access, which overrides the Private Organization-Wide Defaults for dashboard components but not for report folders.
Answer
The dashboard component calculates results using the record-level security of the static running user, while the source report executes using the security context of the logged-in user.
When a dashboard is configured with a static running user, component metrics are calculated using that specified user's security access level (the CCO), allowing viewers to see summarized metrics they might not individually own. However, when a user clicks the component to open the source report, Salesforce runs the report using the logged-in user's security context, restricting record display to only what the user can access under OWD and sharing rules.
Step-by-Step Solution
Key Concept
Static dashboard components render data according to the designated running user's security context, whereas underlying source reports always execute based on the logged-in user's security access.