To ensure that only the Complaints Specialist public group can view and edit Complaint records in a Private sharing model, creating a criteria-based sharing rule is appropriate. This rule can be configured to grant Read/Write access to users in the Complaints Specialist group for all records in the Complaints object. This approach meets the requirement of limiting access while providing the necessary permissions to the designated group.
For more on sharing rules, refer to: Salesforce Sharing Rules Overview.
Northern Trail Outfitters has a Complaints custom object related to Accounts with an organization-wide default (OWD) of Private. Only users in the Complaints Specialist public group should view and edit all Complaint records.
Solution:
Criteria-Based Sharing Rule:
Purpose: Sharing rules open up record access beyond the OWD settings.
Implementation Steps:
Navigate to Setup > Sharing Settings.
Select the Complaints object and create a new Criteria-Based Sharing Rule.
Set the criteria to include all Complaint records (e.g., CreatedDate != null).
Share with the Complaints Specialist public group.
Set access level to Read/Write.
Advantages:
Scalability: Automatically includes all current and future Complaint records without manual intervention.
Security Compliance: Ensures only authorized users have access, adhering to the principle of least privilege.
Why Other Options Are Less Suitable:
Option A: Apex managed sharing is more complex and requires custom development. Standard sharing rules suffice for this requirement.
Option C: It's not possible to set default visibility to only specific users via OWD settings; OWD applies universally and cannot target a public group.
Salesforce Sales Cloud Reference:
Sharing Rules Overview: Salesforce Help - Sharing Rules
Creating Criteria-Based Sharing Rules: Salesforce Help - Create Sharing Rules Public Groups: Salesforce Help - Create a Public Group By creating a criteria-based sharing rule, Northern Trail Outfitters ensures that only the Complaints Specialist public group has the necessary access to all Complaint records.