Object, field and record-level access layers for health personas
Key Takeaway
Design three layers of access for each persona: object, field and record.
Agentforce Health controls data access in three layers. Object-level security decides which types of records a user can work with. Field-level security decides which fields on those objects they can see or edit. Record-level security decides which individual records they can reach. A consultant designs these layers for each persona, such as a care plan user, so every user gets the access their job needs and no more.
How to plan access for each persona
- Make a table of your user types, called personas.
- For each persona, write down the access it needs to each object and to the fields and records within that object.
- Use the table as you build the security model.