[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-656399-105":59,"doc-detail-656399-en":130},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":123,"head_meta":125,"extra_data":127,"updated_unix":129},105,"en","record-level-access-under-the-hood-data-access-in-salesforce","Record-Level Access - Under the Hood - Data Access in Salesforce","","Record-Level Access: Under the Hood explains how Salesforce security translates organizational security requirements into an effective data access model. The paper contrasts the user’s perspective of “having access” with the architect’s need to grant only the appropriate access levels. It details how data access splits into object-level (including field-level security and object permissions) and record-level access (Sharing) using organization defaults, role and territory hierarchies, sharing rules, teams, and manual or programmatic sharing, then outlines how Salesforce recalculates and grants access at the database level.",{"@graph":69,"@context":122},[70,84,105],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":30,"@type":76,"position":81},"https://docshare.wps.com/document/technology/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/record-level-access-under-the-hood-data-access-in-salesforce/656399/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/record-level-access-under-the-hood-data-access-in-salesforce/656399.png","ImageObject",300,407,{"name":92,"@type":93},"Alexandar","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-11-02","2026-10-25",true,{"@type":102,"interactionType":103,"userInteractionCount":14},"InteractionCounter",{"@type":104},"ViewAction",{"@type":106,"mainEntity":107},"FAQPage",[108,114,118],{"name":109,"@type":110,"acceptedAnswer":111},"How does Salesforce data access differ between user and architect perspectives?","Question",{"text":112,"@type":113},"From a user perspective, access is about what it means to work with records in the organization. From an architect perspective, access must be granted at the right level by understanding and implementing object-level (field-level) and record-level access correctly.","Answer",{"name":115,"@type":110,"acceptedAnswer":116},"What are the main components of record-level access (Sharing) in Salesforce?",{"text":117,"@type":113},"Record-level access uses tools such as organization-wide defaults, role hierarchy, territory hierarchy, sharing rules, teams, manual sharing, and programmatic sharing.",{"name":119,"@type":110,"acceptedAnswer":120},"How does Salesforce determine which records a user can access?",{"text":121,"@type":113},"When a user opens a record, runs a report, accesses a list view, or searches via UI or API, Salesforce checks record access configuration to decide which records the user can access, then recalculates access when sharing configurations change.","https://schema.org",{"og:url":83,"og:type":124,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":126,"canonical":83},"index,follow",{"doc_id":128,"site_id":62},656399,1793005995,{"code":4,"msg":5,"data":131},{"doc_id":128,"user_id":132,"nickname":92,"user_avatar":133,"doc_module":4,"category_id":29,"category_name":30,"doc_title":65,"doc_description":67,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":14,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":139,"language":140,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":141,"faqs":142,"seo_title":143,"seo_description":67,"update_tm":144,"read_time":145},962090768658,"https://ap-avatar.wpscdn.com/davatar_6f874abed73319feea01a86fa6f0fab8","Record-Level Access: Under the Hood  \nSalesforce, Winter ’27  \nLast updated: September 11, 2026  \n© Copyright 2000–2026 Salesforce, Inc. All rights reserved. Salesforce is a registered trademark of Salesforce, Inc., as are other names and marks. Other marks appearing herein may be trademarks oftheir respective owners.  \nCONTENTS  \nRECORD-LEVEL ACCESS: UNDER THE HOOD .......................... 1  \nPreface ............................................................. 1  \nData Access in Salesforce ................................................ 1  \nRecord Access Calculation ............................................... 3  \nAccess Grants ........................................................ 3  \nDatabase Architecture .................................................. 4  \nSharing Rows ........................................................ 5  \nGroup Maintenance Tables ............................................... 6  \nSample Scenarios ..................................................... 9  \nPutting It All Together ................................................... 14  \nSummary .......................................................... 17  \nRECORD-LEVEL ACCESS: UNDER THE HOOD  \nPreface  \nIf you’re a Salesforce architect, you already know your overarching goal for data security: Understand your company’s enterprise security model, then build a data access model that reflects it in your Salesforce organization. You have a rich set of Salesforce tools at your disposal for managing that data access, but you don’t manage it at just one level. Instead, you must carefully consider when and how to control access at the object, record, and field levels.  \nIn this paper, you can find a brief overview of these different levels of data access, and under the hood, table-level views of record-level access. After reading Record-Level Access: Under the Hood, you should feel better prepared to give the right users the right access to the right records at the right time—and do so in the fastest time possible.  \nAudience  \nThis paper is intended for expert architects working on Salesforce implementations that have complex record access requirements or require large-scale realignments of sales organizations.  \nAssumptions  \nThis paper assumes that you are an expert in Salesforce administration and security, and in SQL and relational database concepts.  \nData Access in Salesforce  \nTo meet your company’s security needs, it’s important to understand what data access means to your users and to you.  \nData Access: User’s Perspective  \nIf you put yourself in your users’ shoes, you won’t necessarily know or care how you’re getting access to records, but you might want to understand what having access means within the context of your organization. The following graph can help users visualize the different kinds of access that can be configured in Salesforce.  \nRecord-Level Access: Under the Hood Data Access in Salesforce  \nFor example, if a user has access to an account field, then they have access to both the account field and the account object itself. However, a specific account record, such as “Account A”, might not be accessible to that user due to additional access control applied via sharing rules or other tools.  \nData Access: Architect’s Perspective  \nAs an architect, you must both understand your user’s perspective and know how to grant users only the appropriate level of access to the data that they should be able to access.  \nFrom an architect’s perspective, data access in Salesforce falls into two main categories: object-level access, which includes field-level access, and record-level access.  \nObject-level access determines whether a user has access to a particular object, which fields they can see on that object, and which actions they can perform. You configure object level access on user profiles.  \nRestricting access  \nThe “Read,” “Create,” “Edit,” and “Delete” object permissions determine which actions a user can perform on any of","cbCaivQXxmYqXzFy","https://ap.wps.com/l/cbCaivQXxmYqXzFy","pdf",1366065,22,"English","# Preface\n# Data Access in Salesforce\n## Record Access Calculation\n## Access Grants\n# Sample Scenarios\n## Putting It All Together\n# Summary","[{\"question\":\"How does Salesforce data access differ between user and architect perspectives?\",\"answer\":\"From a user perspective, access is about what it means to work with records in the organization. From an architect perspective, access must be granted at the right level by understanding and implementing object-level (field-level) and record-level access correctly.\"},{\"question\":\"What are the main components of record-level access (Sharing) in Salesforce?\",\"answer\":\"Record-level access uses tools such as organization-wide defaults, role hierarchy, territory hierarchy, sharing rules, teams, manual sharing, and programmatic sharing.\"},{\"question\":\"How does Salesforce determine which records a user can access?\",\"answer\":\"When a user opens a record, runs a report, accesses a list view, or searches via UI or API, Salesforce checks record access configuration to decide which records the user can access, then recalculates access when sharing configurations change.\"}]","Record-Level Access - Under the Hood - Data Access in Salesforce | PDF",1792968262,55]