Account team access versus consolidated record access
Key Takeaway
Salesforce always gives a user the highest access that any source grants. The account team member record shows only the team grant, so use "Team Member Access" to see what the user can actually do.
Adding a user to an account team gives them access to the account. The team is only one of several places that access comes from. Salesforce gives you two views of a team member's access. The account team member record shows only what was granted directly on the team. The Team Member Access action shows the consolidated total from every source. Knowing which view you are looking at explains why a user can often do more than their team grant suggests.
Where account access comes from
When you add a user to an account team, you give them a direct grant, such as Read Only or Read/Write, on the account and its related records. That grant is only one source of the user's effective access.
Effective access also comes from these sources:
- Org-wide defaults
- The role hierarchy
- Sharing rules
- Profile and permission set permissions
- Manual shares
Salesforce always applies the highest level of access from any source. Think of each source as a key: the user gets in with whichever key opens the most.