Rajan Gupta
@Rajanguptaa
SALESFORCE
SECURITY
Interview Questions & Answers
Data Sharing and Security
Rajan Gupta
@Rajanguptaa
1. What is Record Level Security?
It allows you to restrict access to records for users even if the
user has object level permissions. Record level access can be
managed through organization-wide defaults, role hierarchy,
sharing rules, and manual sharing.
2. What is Role Hierarchy?
It gives access to users higher in the hierarchy to access all
records owned by users below them. Each role represents a
level of data access that a user or group of users needs
Rajan Gupta
@Rajanguptaa
3. What is Sharing Rule?
Sharing rules are exceptions to org-wide defaults that allow
records to be shared with a group of users or roles and
subordinates so they can get access to records they don't own
4. What is Public Group?
A group of users that can be added or removed anytime. Public
groups can include other public groups, roles, roles and
subordinates, and individual users
Rajan Gupta
@Rajanguptaa
5. What are "View All" and "Modify All"?
These permissions grant access to all records of the object,
regardless of the sharing and security settings, ignoring the
sharing model, roles, and sharing rules.
6. What is Organization-Wide Defaults
(OWD)?
It specifies the default level of access for records, locking down
data to the mostrestrictive level. There are three access
levels:private, public read-only, and public readwrite.
Rajan Gupta
@Rajanguptaa
7. What is Grant Access Using Hierarchies?
This controls whether users above in the role hierarchy can access
records of subordinates. It is checked by default for all standard
objects but can be controlled for custom objects.
8. What is Manual Sharing?
It allows owners of particular records to share them with other
users. Manual sharing is not automated and can be useful in
situations where records need to be shared with another user
manually.
Rajan Gupta
@Rajanguptaa
9. If an object does not have edit permission but
OWD is public read-write, what will happen?
The user won't be able to edit the record if they don't have edit
permission at the object level, even if OWD is set to public read-write.
Rajan Gupta
@Rajanguptaa
Assistant Consultant at TCS
