Hi,
I have the following configuration:
SalesUser1 - member of SalesUnit1 - in SalesRole
SalesUser2 - member of SalesUnit2 - in SalesRole
SalesRole gives read access on BusinessUnit level on Opportunity and read access on Organization level on Account.
We have an Account1 owned by SalesUser1.
SalesUser2 has an Opporunity2 related to Account1.
Now SalesUser1 can see Opportunity2, but this opp is owned by SalesUser2 who is in a different business unit and the read access is only granted within the same business unit. There is no share on this opp.
SalesUser1 can not see any other opps of SalesUser2.
I think this read right is come through the Account1 record which is related to Opportunity2 and owned by SalesUser1.
I checked the Case entity's security and it works in the same way. (Maybe some other entities too.)
BUT, my custom entity does not work in this way.
I would like to use this functionality on my custom entity as well, but I could not find any documentation about it.
How this security mechanism works?
How can I turn it on for a custom entity?
How can I turn it off for an OOB entity?
Regards,
Szabolcs