We have a flat organizational
Role Hierarchy. One Manager (Profile 1) and two Staff (Profile 2) for both South and West. Both of these managers report up to the Regional Manager.
We have built loads of custom objects in our org but I have been told that one of Profile 2 staff in the hierarchy can run reports showing sensitive information from the regional manager?
Would this be a Profile update to ensure they cannot see that field or do I need to adjust the Sharing setting for the custom object