Unable to get Account Sharing Setting to work Properly. What am I doing wrong? - Answers - Salesforce Trailblazer Community
Trailblazer Community
Ask Search:
Caterina TorresCaterina Torres 

Unable to get Account Sharing Setting to work Properly. What am I doing wrong?

In our sandbox environment, we created a custom read only profile for one user to test privatizing Accounts. When I log in as the user, I can see all Account records. So far, I have checked:
  • User does is not on any public groups
  • User does not have any permission sets
  • User can see all Accounts, regardless of Role
  • Sharing Setting for Account is Private and allows access for role hierarchy
  • There are no special sharing settings on the Account
  • The account record themselves do not have special sharing settings
  • User is not part of any Account Team
  • Profile does not have View All or Modify All access on Object or elsewhere on profile
  • Profile only have View access to Account
Any other areas I am missing? My assumption right now is the Sharing Setting for Opportunity, which is Private, but we created one for Opp that allows all users to view/edit all Opportunities. But since opportunities are a child record, it doesn't make sense for the sharing to go up...?
Best Answer chosen by Caterina Torres
Eric PraudEric Praud
Hi Caterina,

You could switch to classic, add the sharing button to the page layout then click on it (it doesn't work in Lightning yet, soon though). It will tell you why the record is shared with this user (you may need to click on Expand after clicking the sharing button).
I woudl suspect either a sharing rule or a manual/apex sharing
 

All Answers

Caterina TorresCaterina Torres
Screenshot of sharing setting for Opportunities
User-added image
Eric PraudEric Praud
Hi Caterina,

You could switch to classic, add the sharing button to the page layout then click on it (it doesn't work in Lightning yet, soon though). It will tell you why the record is shared with this user (you may need to click on Expand after clicking the sharing button).
I woudl suspect either a sharing rule or a manual/apex sharing
 
This was selected as the best answer
Caterina TorresCaterina Torres
Thank you so much for pointing that out, Eric! I didn't realize Sharing on the Record level doesn't work in Lightning yet.

It says it is being sharing to all internal users because of "Associated record owner or sharing." Could this be because of the Sharing Setting we set up for Opportunities?

User-added image
Caterina TorresCaterina Torres
Clicked on that Reason and it answered it for me - has to do with Opportunity sharing. Thanks again!
User-added image
Eric PraudEric Praud
What happens when you click on "Associated record owner or sharing"?
Have a look at this article:
https://help.salesforce.com/articleView?id=granting_access_to_records.htm&type=5
"If you’re sharing an opportunity or case, the users you share it with must have at least Read access to the account (unless you are sharing a case via a case team). If you also have privileges to share the account itself, the users you share it with are automatically given Read access to the account."

Must be what's happening here
Eric PraudEric Praud
It looks like we were typing our answer at the same time, but at least, now you know :)