Set Sharing Inheritance for a Dataflow

Configure Dataflows

Update the dataflow that generates the datasets that you want to inherit sharing. Specify which source object to inherit sharing from and the backup security predicate.

1. Enable sharing inheritance for your org and synced objects if you haven’t already. For more information, see Enable Sharing Inheritance.
2. If using the dataflow editor to specify the source object and backup security predicate:
   1. In CRM Analytics, click the gear icon () and then click Data Manager.
   2. Click the Dataflows & Recipe tab.
   3. Click the dataflow that you want to edit, or click the actions button and select Edit.
   4. Click the sfdcRegister node.
   5. Select the object to inherit sharing from in the Sharing Source field.
   6. Optionally, add a security predicate in the Security Predicate field. No value is “False,” so users not covered by sharing inheritance have no record visibility. For syntax and more information, see Add Row-Level Security with a Security Predicate.
   7. Click Save.
3. If configuring the dataflow through the definition file:
   1. Add the rowLevelSharingSource parameter to the sfdcRegister node parameters for the dataset. For more information, see sfdcRegister. The rowLevelSharingSource parameter takes a string, which is the API name for the object to inherit sharing from. In this example, the parameter specifies to inherit the Salesforce sharing settings on the Opportunity object.

      "reg": {
        "action": "sfdcRegister",
        "parameters": {
          "source": "Opportunity_final",
          "name": "Opportunity w/ Account",
          "alias": "Oppty_w_Acct",
          "rowLevelSharingSource": "Opportunity",
          "rowLevelSecurityFilter": "'OwnerId' == \"$User.Id\""
        }
      },

      

      Note Only inherit sharing settings from objects extracted using the sfdcDigest transformation.
   2. Specify the security predicate in the rowLevelSecurityFilter parameter of the rowLevelSharingSource parameter. In the example, when sharing limits are exceeded, users see only the opportunities that they own. Set the security predicate to false to block all users not covered by sharing.

Configure Datasets

Update the sharing inheritance settings for datasets on the edit dataset page.

Note The settings in the dataset and dataflow must match. If they don’t, you receive the warning, "The sharing source and security predicate in this dataset version must be the same as in the dataflow."

1. Edit the dataset. For more information, see Edit a Dataset.
2. Click the pencil under Sharing Source.
   
3. Select the object to inherit sharing settings from. Only valid objects are displayed in the list. For example, the primary key of the object must be a field in the dataset.
4. Optionally, click the pencil under Security Predicate. The security predicate is the row visibility fallback when you exceed sharing inheritance limits, described here.
   1. Add your security predicate in the syntax described in Add Row-Level Security with a Security Predicate. The default on existing datasets is false, so users not covered by sharing inheritance have no record visibility.