function readOnly(count){ }
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
+ Start a Discussion
Jhony DeepJhony Deep 

What if no Role is assigned to a User?

Would it be correct to say - if no Role is assigned to a user, the user shall be able to access only those records which are shared using customised sharing rules or can access public Read object’s records or can access records via public groups?
Best Answer chosen by Jhony Deep
Ajay K DubediAjay K Dubedi
Hi Jhony,

Yes,If no role is assigned, the user will get access through
  • Object's OWD specified( private, read only etc..).
  • Sharing Rules: Remember you can share the records with Public Groups; and you can add users in Public Groups.(setup->manage user->public group)
  • Manual sharing on the records.
While creating a user we can create user without roles, but actual functionality was explained below:
Roles (configured under Admin Setup->Manage Users->Roles) are used to control which Salesforce records are available to users assigned to the role.Unlike Profiles, there is no configuration in a role. Instead, Roles are arranged in a hierarchy.Top level Roles can contain lower level roles.Record access is determined by the role of the record owner. Any member of the role hierarchy above the record owner’s role will have access to the record. Users in the same role as the record owner, and users in roles outside of that hierarchy, may or may not have access.By default, all Users have Read-Write access to all records in Salesforce.
However, this is controlled by Organization Wide Sharing — a topic for another time.
I hope it will help you.
Please mark my answer as a solution if it is helpful
Regards,
Ajay

All Answers

Ajay K DubediAjay K Dubedi
Hi Jhony,

Yes,If no role is assigned, the user will get access through
  • Object's OWD specified( private, read only etc..).
  • Sharing Rules: Remember you can share the records with Public Groups; and you can add users in Public Groups.(setup->manage user->public group)
  • Manual sharing on the records.
While creating a user we can create user without roles, but actual functionality was explained below:
Roles (configured under Admin Setup->Manage Users->Roles) are used to control which Salesforce records are available to users assigned to the role.Unlike Profiles, there is no configuration in a role. Instead, Roles are arranged in a hierarchy.Top level Roles can contain lower level roles.Record access is determined by the role of the record owner. Any member of the role hierarchy above the record owner’s role will have access to the record. Users in the same role as the record owner, and users in roles outside of that hierarchy, may or may not have access.By default, all Users have Read-Write access to all records in Salesforce.
However, this is controlled by Organization Wide Sharing — a topic for another time.
I hope it will help you.
Please mark my answer as a solution if it is helpful
Regards,
Ajay
This was selected as the best answer
Arvind KumarArvind Kumar

Hi Jhony,

Currently, a user will be able to transfer the record if any of the following are true:
- User is the owner of the record
- User is above the owner of the record in the role hierarchy
- User has the "Transfer Record" permission
- User has "Modify All" permission on the object

One option is to give all users the "Transfer Record" permission, then restrict the transfers using one or more validation rules.

Read below link, it will give more information about the Role.
http://misstheiceberg.com/2013/04/18/salesforce-record-access-profiles-and-roles/
https://help.salesforce.com/articleView?err=1&id=admin_roles.htm&siteLang=en_US&type=0
https://www.shellblack.com/administration/owds/


 

Ajay K DubediAjay K Dubedi
Thanks Jhony for selecting my answer as a best answer. It's my pleasure to help you!!

Regards,
Ajay