I have a requirement to control record level access that I'm having trouble solving. I need to be able to share all accounts with the org(read/write) except for accounts owned by one particular user which are all on the same record type. I also need to be able to share all opportunities with the organization that are NOT owned by this particular user.
I've made Accounts private and created a sharing rule based on record type to open up access to accounts not owned by the user and on that record type. I'm stumbling on what to do for the opportunity sharing rules. I want all of the opportunities in the org to be public except for those without that account owner.
What's the best approach? Thanks in advance