Data Security and Level of Data Access in Salesforce

Data security in Salesforce refers to the comprehensive set of practices and technologies implemented to protect the sensitive information stored within your Salesforce platform.

This encompasses safeguarding customer data, employee information, financial records, and any other confidential data residing in your Salesforce environment.

What is Data Security in Salesforce?

“Data security in Salesforce deals with the security or sharing settings of data and visibility between users across the organization.” 

It means data security defines what a user can see and what operations a user can perform on the platform. The Salesforce platform provides a flexible, layered sharing model that makes it easy to assign different data sets to different sets of users.

The Security and Sharing model can be configured entirely using the user interface yet it is implemented at the API level which means any permissions specified for objects, records, and fields apply even if a user query or update the data via API calls.

Different Levels of Data Access in Salesforce

The data access on Salesforce is categorized in four levels, the following are:

1. Organization Level

In Organizational-level security in Salesforce, you can keep a list of authorized users for your entire organization, set password policies, and restrict logins to specific hours and locations.

2. Object Level

Object-level security provides the simplest way to control which users have different kinds of access to each and every object. By setting permissions on a particular type of object, you can prevent a group of users from creating, viewing, editing, or deleting any records of that object.

For example: one user can only read and create student records, and another user has read and edit access.

3. Field Level

Field Level Security restricts access to certain fields, even for objects a user already has access. For example, you can make the salary field in a position object invisible to interviewers but visible to hiring managers and recruiters.

4. Record Level

Record-level security lets users access some records but not others. It is used to control data access with greater precision. Users can have access to view an object but can be restricted to individual records. 

For example: There are various students from different courses. so, we can set the particular user (let’s say Mohan who is having Training Manager profile) can only see the records from the particular course(let’s say Java)

Note: Always make a table for various types of users and the level of access to data that each user has in your organization to implement a security and sharing model.

Next Topic