Cloud Kicks has informed CRM Analytics developers that they have two scenarios with restricted row-level security.
The parameters being:
1. Non-CXOs and VPs working in EMEA can have access to EMEA records only.
2. CXOs and VPs should have access to all data irrespective of the region (APAC, EMEA, etc.).
Which sharing method works for this scenario?
For Cloud Kicks' requirements regarding access to data based on roles and geographic regions, the most efficient and scalable approach is to implement row-level security using fields on the user record, like Department or Region. Here's the rationale for choosing this approach:
Scalability and Maintenance: By applying security rules based on user record fields, Cloud Kicks can manage access dynamically without needing to maintain multiple dashboards or datasets. This reduces administrative overhead and simplifies updates as roles or regional structures change.
Flexibility: Using a field on the user record to control access allows for easy expansion or modification of security policies as new regions or roles are added.
Simplicity: This method ensures a clear and straightforward security model that can be easily audited and understood by administrators and compliance teams.
Currently there are no comments in this discussion, be the first to comment!