Users are allowed to view all data within our Org, with one exception. Users in Region X are not allow to view leads from other regions but then can view any leads within their region. How do I set this up?


  • You could probably use role hierarchy for this. – Luke Vang Jan 30 '15 at 21:36
  • 1
    And org-wide defaults, and sharing rules - but definitely not profiles or permission sets ... – user735 Jan 30 '15 at 21:39
  • Thank you Luke and John. This is my plan after reading your proposals. Set the OWD on Lead object to Public/RW and enforce role hierarchy. Then put Region X under the rest of the All Regions (Excluding Region X) in the role hierarchy setup. Do you think this will works? Thanks – user7123 Jan 30 '15 at 21:59

In response to your comment:

No. As you go along the different levels of security you can only widen access, you cannot restrict it. OWD is the first level, if you have Lead as public/rw at that level everyone can rw Leads regardless of role hierarchy or anything else.

Set the OWD to be private and go from there.

  • As @Force Hero suggested, I set OWD to private, created two groups and added sharing rules. It works like a charm. – user7123 Mar 2 '15 at 23:51

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.