1

I believe if you have access to a report, record level access can be ignored and you can potentially see all records. Does this apply at the object level of a profile? So say a report is on Accounts, and your profile has No Access on the account object. Technically, you shouldn't be allowed to view that report, right?

Improve this question

1 Answer 1

Reset to default
3

Reports honor object, record, and field level security. You cannot run a report for a data type that you don't have access to. This is true even if you have access to the report (e.g. it is in a Report Folder or Dashboard Folder you have access to). Please note that Dashboards allow users to see the generated charts even without access to the underlying data, but will not be able to see the report details.

Improve this answer
2
  • reports can potentially ignore sharing rules, right?
    – Tyler Zika
    Commented Jul 8, 2019 at 22:58
  • 1
    @TylerZika No, they do not ignore sharing rules (record-level security). A user won't see a record in a report if they can't see it via other means (e.g. with a search or query).
    – sfdcfox ♦
    Commented Jul 8, 2019 at 23:03

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .