Ask Search:
Tom LinTom Lin 

Difference between "Grant Access Using Hierarchies" for OWD and public groups

When setting up both OWDs and public groups, the "Grant Access Using Hierarchies" option appears in both places. If a sharing rule grants access to records of an object which has this enabled, to a group which hasn't, would the group members' managers still inherit access?
Best Answer chosen by Tom Lin
Swanand PatkiSwanand Patki
Yes, grant access using hierarchies will give access to all people in above role whether it is coming from sharing settings or owd or profile or permission sets

All Answers

Swanand PatkiSwanand Patki
Yes, grant access using hierarchies will give access to all people in above role whether it is coming from sharing settings or owd or profile or permission sets
This was selected as the best answer
Naveen DhanarajNaveen Dhanaraj
This will give permission to all users in above Role..
Example:
A simple example can be assume opportunity is private OWD and you are Sales Rep owning an opportunity record ,you have your manager who is higher in the role hierarchy than you ,even though opportunity is private he will still get access to your records .

For More Understanding Read the Examples,
Controlling Access Using Hierarchies:
https://help.salesforce.com/articleView?id=security_controlling_access_using_hierarchies.htm&type=5
Tom LinTom Lin
Hi guys,

Thanks for the answers.

Just to confirm, I am referring to the below checkbox when configuring a public group:

User-added image

My question is on the interaction between "Grant Access Using Hierarchies" here in public groups, and "Grant Access Using Hierarchies" as part of the OWD of a custom object.

Let's say a sharing rule grants access to a public group for the records of a custom object:

User-added image
There are two situations which are confusing for me:

1. "Grant Access Using Hierarchies" is ticked for the public group and not ticked for the custom object's OWD
2. "Grant Access Using Hierarchies" is ticked for the custom object's OWD but not for the public group

In both examples, would those users with roles above the group members' inherit access to the records granted by the sharing rule?