1

I believe if you have access to a report, record level access can be ignored and you can potentially see all records. Does this apply at the object level of a profile? So say a report is on Accounts, and your profile has No Access on the account object. Technically, you shouldn't be allowed to view that report, right?

3

Reports honor object, record, and field level security. You cannot run a report for a data type that you don't have access to. This is true even if you have access to the report (e.g. it is in a Report Folder or Dashboard Folder you have access to). Please note that Dashboards allow users to see the generated charts even without access to the underlying data, but will not be able to see the report details.

| improve this answer | |
  • reports can potentially ignore sharing rules, right? – Tyler Zika Jul 8 '19 at 22:58
  • 1
    @TylerZika No, they do not ignore sharing rules (record-level security). A user won't see a record in a report if they can't see it via other means (e.g. with a search or query). – sfdcfox Jul 8 '19 at 23:03

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.