Add Row-Level Security by Inheriting Sharing Rules

Use sharing inheritance to let CRM Analytics apply the same sharing setup for your datasets as Salesforce uses for your objects. Sharing inheritance increases access accuracy and reduces the need for complicated security predicates for most objects and situations. The tradeoff for applying sharing inheritance is an increase in the time to complete data syncs, dataflow and recipe jobs, and queries. The more complicated the sharing settings, the more impact there is.

As an admin for your Salesforce org, you likely use a combination of sharing settings to provide users access to Salesforce data appropriate to their roles. Sharing settings include manual and rule-based sharing as well as role hierarchy, role, group, apex-managed, and team-based sharing. For more information, see Sharing Settings.

For supported objects, you can enable sharing inheritance in CRM Analytics to use the Salesforce sharing settings in CRM Analytics. When you create or edit datasets, specify the objects to inherit sharing from.

• Enable Sharing Inheritance
  Turn on sharing inheritance and select the objects to use as a sharing source. Sharing inheritance is on by default in new Salesforce orgs.
• Determine If Sharing Inheritance Will Work for You
  To understand how well sharing inheritance can work for your dataset row-level sharing needs, review these supported objects, maximum number of sharing descriptors, and considerations. Use the Sharing Inheritance Coverage Assessment tool to evaluate and understand your object and user eligibility.
• Set Sharing Inheritance for a Data Prep Recipe
  Specify the sharing inheritance settings when generating a dataset from a Data Prep recipe, then set a default security predicate.
• Set Sharing Inheritance for a Dataflow
  Specify which datasets inherit sharing settings and set a default security predicate.
• Sharing Inheritance Limits and Considerations
  Here are some things to consider when working with sharing inheritance.