Sharing rules automatically extend record access to users in public groups, roles, or territories as exceptions to your organization-wide sharing settings. They exist so you can open records for particular people without changing the default everyone else follows, and they cannot restrict access below that default. When several sharing rules or other access methods apply to the same user and record, Salesforce keeps the most permissive level.