I came up with this diagram trying to map or organize all Salesforce access mechanisms spatially.
Most of the diagrams I've found tend to list only a few of them, usually starting with OWD or profile, going through role, rules, team and territory.
This one is not perfect but I wanted to submit it to public scrutiny - maybe someone will have a better idea.
I thought of organizing it by categories such as baseline (OWD, external account hierarchy), ownership hierarchy (role, territory, master-detail, etc), group-based (queues, teams, sharing rules, etc) and ad-hoc (manual, Apex).
Another idea was to order it by how "visible" it is (OWD less visible/more implicit, Sharing rules more explicity and auditable, Apex sharing more explicit).
Another criteria: intent (OWD, role, ...) vs business (territory/teams, ...) vs operational (queues, groups) vs exception (manual, apex).
Some other ideas:
- How many records × users are affected?
- Recalculation cost
- Auditability
- How well does it encode business intent?
- How often it causes visibility issues?
It is difficult to find the dimensions orthogonal to each other to orient the items other than the obvious internal vs external and order of evaluation.
