Sharing a record through Account and Opportunity Participant records
Key Takeaway
Participants get access from their participant role's default access level, so changing the role updates access on all records assigned to it. For opportunities, delete participants before you turn on "Private", and recreate them after you turn it off.
Compliant Data Sharing in Agentforce Financial Services lets orgs with strict sharing policies share one specific account or opportunity with chosen users or groups. You add those users or groups to the record as participants. Each participant gets a participant role, and the role sets how much access they receive. Compliant Data Sharing works with the other Salesforce data sharing features. You can use it to share records in Salesforce CRM or in Experience Cloud.
How participants get access
A participant can be a single user or a participant group, which shares the record with a whole team in one step. Each participant record holds two things: the user or participant group that gets access, and the participant role that defines the level of record access. The access comes from the role, not from a separate choice you make on each record.
Each participant role has a default access level. When you assign the role, the participant gets that access automatically, so the same role gives the same access across the org. When you change a role's default access level, Salesforce updates the share table entries for all records assigned to that role. You change access in one place instead of editing each record.
The org-wide default for Account is Private. You create a participant role named Portfolio Analyst with Read Only access. Analysts are then added with this role as account participants on 40 client accounts. Later, the team decides analysts need to edit these accounts. You change the Portfolio Analyst role's default access level to Read/Write one time. Salesforce updates the share table entries on all 40 accounts, and nobody has to edit the 40 participant records.