Determine If Sharing Inheritance Will Work for You

Supported Objects for Sharing Inheritance

Which Salesforce object does your dataset inherit sharing from? Each dataset can inherit sharing settings from one object, regardless of how many source objects are used to create it. Supported objects for sharing inheritance are:

• Account
• Case
• Contact
• Lead
• Opportunity

Sharing Settings Change Frequency

How often do the sharing settings change for the source object (object selected to inherit sharing from), and how long can you wait for sharing inheritance to catch the change? Each full data sync captures sharing setting changes, so evaluate your sync settings. For more information, see Security Metadata Drift.

Run the Sharing Inheritance Coverage Assessment Report

Does your object have any records or users with more than your org’s maximum sharing descriptors? And what is your org’s maximum sharing descriptors?

Note A sharing descriptor is the ID of any user or group that has access to a record. Sharing descriptors, tracked by Salesforce in the Object Sharing Table, ensure that only the listed users and groups can access the correct records. IDs are added to the sharing table for many reasons including record ownership, sharing rules, and manual sharing.

After you turn on sharing inheritance, run the Sharing Inheritance Coverage Assessment report on an object. Then view the assessment’s user coverage to investigate how well sharing inheritance will work for you.

Important The Sharing Inheritance Coverage Assessment only evaluates active users assigned the “Use CRM Analytics” permission.

1. In the Salesforce Setup menu, under Analytics, select Sharing Inheritance Coverage Assessment.
   
2. In the Salesforce Objects tab, choose the object to evaluate (1).
   
3. Select View Assessment (2). Records from the evaluated object with more than your org’s maximum descriptors (3) are found. The top records with too many descriptors are listed along with their descriptor count.

   If records exceed the limit, depending on your org’s sharing strategy flexibility, choose to reduce the number of descriptors per record or contact Salesforce Support to evaluate whether higher limits are an option.

4. Select View User Coverage to see which users have more than the max descriptors on the selected object. The users not covered by sharing inheritance, who need a security predicate to manage their row-level access, are listed.