14

When dealing with role-based record sharing in a Private sharing model, I often run into a scenario where managers should see their peers' records while their subordinates should not. It's simple enough to create a sharing rule that allows users within a particular role in the hierarchy to have access to each others' records.

However, this can't easily be replicated with a Partner Community. I have a scenario where I am using a Private sharing model and 3 roles for each partner account: Executive, Manager, and User. These roles are generated individually each time I enable an account as partner. For example, when Account A is enabled as a partner, it creates three roles: Account A Executive, Account A Manager, and Account A User. When I do the same for Account B, it generates three completely separate roles, which makes sense in terms of restricting access between partners' records. But if I would like to, for each partner account, extend sharing between that account's Executive users, I am stuck.

It appears to me that the only non-programmatic way to achieve this is to create a separate sharing rule for every partner account. This would only work on a very small scale. Does anyone have any scalable solutions to this? I know that this can be achieved through Apex-based sharing, but I would like to find a simpler solution if possible.

1
  • I have been hitting a similar issue with Customer Community Plus users though that is with custom objects. I really suspect that there is not really any solution other than using Apex Based sharing for this.
    – Dave Humm
    Feb 6, 2017 at 16:33

1 Answer 1

17
+50

I believe what you are looking for is Super User access:

Super User Access

Users can be assigned super user access to give them access to data owned by other users belonging to the same role or those below in the hierarchy. For example, a Partner Manager with super user access can see data owned by other users in the Partner Manager role and the Partner User roles.

Documentation Reference

When a user has this access they can see data by their peers (same role) and those below them but NOT roles above them.

In order to set this up for a Partner Community:

Go to Communities Settings

  • Select the checkbox "Enable Partner Super User Access"
  • Save.

Then on the Partner User's contact record:

  • Press the "Manage External User" button
  • Select "Enable Super User Access". (If this option does not appear, it needs to be added to the Contact's page layout first)
4
  • This is a great candidate for Super User Access! Provides simple horizontal access within a Community, at a user level without the creation of Sharing Rules. Feb 6, 2017 at 17:03
  • This is applicable only for partner portals right? not for Communities. Because in communities, I don't see any checkbox for Enable Partner Super User Access
    – javanoob
    Feb 7, 2017 at 19:36
  • @javanoob - developer.salesforce.com/docs/…
    – Eric
    Feb 7, 2017 at 19:39
  • In addition to Eric's answer You can also add Super User Access permission by app settings in permission sets. Dec 29, 2020 at 14:03

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .