Solution Design
Solution design and security scenarios.
A company wants all users to see all Accounts but only edit Accounts they own or their subordinates in the Role Hierarchy own. How is this configured?
Category: Solution Design
Explanation
Detailed breakdown of the correct answer
OWD + Role Hierarchy
The combination of Organization-Wide Defaults and Role Hierarchy controls the base sharing model.
Therefore, the correct answer is: OWD: Public Read Only + Role Hierarchy enabled. With OWD Public Read Only, everyone can see all records. Role Hierarchy (default ON for Account) automatically grants Edit access to managers over their subordinates' records, plus the owner.
The option that says: OWD Private with Sharing Rules is incorrect because OWD Private would block visibility; would need multiple complex Sharing Rules to give Read to everyone.
The option that says: OWD Public Read/Write is incorrect because it would give Edit access to ALL users over ALL records, doesn't respect ownership.
The option that says: Permission Sets for Edit is incorrect because Permission Sets grant object permissions (global Create, Read, Edit, Delete), don't control access to specific records.