Sharing Architecture Community Cloud

I hope you Have Read about the Community Licenses first before Jumping on to this.

Sharing Architecture Community Cloud

As we are aware , I hope we are aware about the sharing model of Salesforce Object Level and Record Level.

FOR brief - Object Level Access is related to Profile and Permission Set.
                    Record Level access is related to OWD, Sharing Setting(there are ways to share redords.)

for more information please check :

https://developer.salesforce.com/docs/atlas.en-us.apexcode.meta/apexcode/apex_security_sharing_chapter.htm

Similarly the access to Community is Based on the User License Type, Basically the Object to which a user have acccess depends lot on License Type discussed in my earlier post. Link Provide above.

But for the records create by community user or to configure or increase the record sharing there are few things which are going t discuss here :

1. External Sharring Settings

   
     Under Setup →Sharing Setting



Under Default External Access (Highlighted) Admin can configure different level of access for external users. OWD for the external users allows to configure the most permisive permission at  record level for a user.


We also know, we have sharing model(rules, manual sharing etc.) that with OWD in place if a record needs to be shared among users based on roles and hierarchy.

Community Users with Community Cloud license has much more limited level of access to the community's object compared to other community license holders and Salesforce internal org users.
WHY? Because this license holders do not have roles within salesforce, so they can't take advantage of role-based sharing.

Although they can share the record relted to there Account and Contact using Sharring Sets.

Lets Us undersatnd the sahring model in community :



2. Sharing Sets

The Special way of sharing a account or contact related record (directly/indirectlywith the users in community.

SetUp→Community Settings→ Scroll to Sharing Sets Related List


The Admin can setup only one Sharing Set One Profile.

Click on the New Button and Configure a Sharing Set for any Profile.

To configure the access criteria, you would need to map User field that can be matched to the Object field that is having a direct/indirect relationship account and contact.


If you look closely the above image you will an another tab close to Sharing Set Settings named : 

3. Share Group Settings



With all kind of sharing present the need of Sharing Group is for the Customer  Community License users.

With No Roles in palce Share Group fills the gap of sharing the records owned by Customer Community License holders/ High Volume Community or portal users with all the internal or external community users.


 Firstly you need to activate the Share Group . Edit it to add the users with whom you want to share   the records with

By adding a User in share group it gets access to all the record owned by the High volume or portal users irrespective of object mentioned in Sharing Sets.


Comments