salesforce-enterprise-rbac

# Salesforce Enterprise RBAC ## Overview Configure Salesforce's multi-layered security model: Profiles (baseline permissions), Permission Sets (additive permissions), Roles (record visibility), Organization-Wide Defaults (OWD), and Sharing Rules. ## Prerequisites - Salesforce System Administrator access - Understanding of your org's user hierarchy - For SSO: Identity Provider (Okta, Azure AD, etc.) with SAML 2.0 ## Instructions ### Step 1: Understand the Salesforce Security Model ``` ┌─────────────────────────────────────────────────────────────────┐ │ Layer 1: Organization-Wide Defaults (OWD) │ │ Most restrictive baseline — controls default record access │ │ Options: Private | Public Read Only | Public Read/Write │ ├─────────────────────────────────────────────────────────────────┤ │ Layer 2: Role Hierarchy │ │ Users above in hierarchy see records of users below │ ├─────────────────────────────────────────────────────────────────┤ │ Layer 3: Sharing Rules │ │ Grant access to groups of users based on criteria or ownership │ ├─────────────────────────────────────────────────────────────────┤ │ Layer 4: Manual Sharing │ │ Record owner shares individual records │ ├─────────────────────────────────────────────────────────────────┤ │ Layer 5: Profile / Permission Set ...