You are here:
Restrict Visibility for Imported Data in the Archive App
Secure sensitive archived records by manually enabling Archive Widget Search Restriction Rules and uploading custom sharing entries for specific objects. This configuration prevents unauthorized users from accessing imported data in the Archive widget while maintaining visibility for record owners.
Transitioning the widget from its default open-access state to a restricted model based on your defined Salesforce IDs and access levels ensures data privacy.
Important Considerations
- Salesforce admins with the Archive Override Widget Restriction Rule permission set can always see all records, regardless of the share table status.
- When creating your CSV, the
RowCausefield requires a value ofManualorOwner.
Before you import your data, complete these tasks.
- Set the Salesforce Organization-Wide Default for the object to
Private. - Turn off Exclude Share Objects in Archive Settings.
- Configure the Restriction Rule in Archive Settings.
Phase 1: Turn on Restriction Rules
Configure the Archive widget to recognize sharing requirements for your specific object.
- Go to Widget Search Restriction Rules under Search in Archive Settings.
- Click Add Object.
- Select the Share Object associated with your data, such as CaseShare.
- Click Submit All.
-
Click Confirm.
The status changes to Active.Note This process can take up to 30 minutes. You can continue working while the rule activates.
Phase 2: Import Records and Sharing Logic
Import your primary records and their corresponding sharing entries together to restrict visibility upon upload.
-
Define and save your record IDs.
Important Unlike standard Salesforce inserts, Archive doesn't generate these IDs for you. Define the record IDs in your import file and retain a mapping of them to link.
- Create import files for both the primary object, such as Cases, and the Share Object, such as CaseShare.
-
Make sure that the Share Object data includes these mandatory fields.
- Parent ID: The unique ID that you defined for the archived record.
- User or Group ID: The Salesforce ID of the user, role, or public group receiving access.
- Access Level: The permission level, typically Read.
- Upload the Share CSV file by using the import tool.
Phase 3: Verify Record Security
Test imported data visibility to make sure that the fail-open state resolves.
- Log in as a standard user not listed in the Share file. Verify that the records don't appear in the Archive widget.
- Log in as the record owner. Verify that a record owner can see the records.

