Ask Search:
Roger WickiRoger Wicki 

Restricted asset access

We are planning to roll out assets for our users and we have one group of users who should have a very restricted access to assets. Currently, as OWD we have Assets set up as Controlled by parent. The group of users should only have access to an asset (and it's account and contacts), if the asset has a specific status.
Since one can only make Sharing rules on the parent object, I fear that we have to change the OWD to private. Do you know of any different ways where I can give Account, Contact and Asset access based on a criteria on Asset? I was thinking of using a roll-up field, but it seems that those are not available for the picking in sharing rules.

Thanks ahead for any input.
Best Answer chosen by Roger Wicki
Jayson MoralesJayson Morales
Hi Roger,

I think you need to change the OWD from Controlled by Parent to Private so you can create sharing rule for the asset object. Through standard functionality, there's no way to grant access to account and contact based on a criteria on the Asset object. Maybe you might want to explore the apex sharing.

Title: Sharing a Record Using Apex
Url: https://developer.salesforce.com/docs/atlas.en-us.apexcode.meta/apexcode/apex_bulk_sharing_creating_with_apex.htm

Regards,
Jayson

All Answers

Jayson MoralesJayson Morales
Hi Roger,

I think you need to change the OWD from Controlled by Parent to Private so you can create sharing rule for the asset object. Through standard functionality, there's no way to grant access to account and contact based on a criteria on the Asset object. Maybe you might want to explore the apex sharing.

Title: Sharing a Record Using Apex
Url: https://developer.salesforce.com/docs/atlas.en-us.apexcode.meta/apexcode/apex_bulk_sharing_creating_with_apex.htm

Regards,
Jayson
This was selected as the best answer
Roger WickiRoger Wicki
Hi Jayson

Thanks for that input. I ended up doing exactly this. Sad, but well, that's how it works. I didn't want to have to worry about the access for all other users. But i got it to work now.

Have a nice day
Roger