---
schema_version: "1"
id: 20bee4ab2b64683e76d5b05f66e1c028617dcc535df01b574a9a773ff6ef07d7
title: Set Sharing Inheritance for a Dataflow
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/analytics/264-0-0/bi_security_datasets_sharing_applying_datasets.md
canonical_url: https://help.salesforce.com/s/articleView?id=analytics.bi_security_datasets_sharing_applying_datasets.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 171c3908a67cda20d414520c259c756c14e1c9ec084f03fa7c869d02ab947aa8
description: Specify which datasets inherit sharing settings and set a default security predicate.
products:
  - CRM Analytics
  - Cross Cloud
release: "264"
---
# Set Sharing Inheritance for a Dataflow

Specify which datasets inherit sharing settings and set a default security predicate.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-analytics-bi-264-0-0-production-enus/ec791473-f5b4-4f64-a656-9104f455d966/images/icon_note.png)

Note We recommend that you test in a sandbox environment before rolling out sharing inheritance to production. Test your particular use cases against your Salesforce org’s security model and data to make sure that sharing inheritance works for you.

## Configure Dataflows

Update the dataflow that generates the datasets that you want to inherit sharing. Specify which source object to inherit sharing from and the backup security predicate.

1. Enable sharing inheritance for your org and synced objects if you haven’t already. For more information, see [Enable Sharing Inheritance](https://help.salesforce.com/s/articleView?id=analytics.bi_security_datasets_sharing_getting_started.htm&release=264.0.0&type=5 "Turn on sharing inheritance and select the objects to use as a sharing source. Sharing inheritance is on by default in new Salesforce orgs.").
2. If using the dataflow editor to specify the source object and backup security predicate:
    1. In CRM Analytics, click the gear icon (![Gear icon](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-analytics-bi-264-0-0-production-enus/ec791473-f5b4-4f64-a656-9104f455d966/bi/images/bi/bi_integrate_dataflowmanager_gear_icon.png)) and then click **Data Manager**.
    2. Click the **Dataflows & Recipe** tab.
    3. Click the dataflow that you want to edit, or click the actions button and select **Edit**.
    4. Click the sfdcRegister node.
    5. Select the object to inherit sharing from in the Sharing Source field.
    6. Optionally, add a security predicate in the Security Predicate field. No value is “False,” so users not covered by sharing inheritance have no record visibility. For syntax and more information, see [Add Row-Level Security with a Security Predicate](https://help.salesforce.com/s/articleView?id=analytics.bi_security_datasets_predicate_considerations.htm&release=264.0.0&type=5 "Applying a predicate to a dataset is more than just defining the predicate expression. You must also consider how the predicate depends on the information in the dataset and where to define the predicate expression.").
    7. Click **Save**.
3. If configuring the dataflow through the definition file:
    1. Add the `rowLevelSharingSource` parameter to the `sfdcRegister` node parameters for the dataset. For more information, see [sfdcRegister](https://help.salesforce.com/articleView?id=bi_integrate_register_transformation.htm&language=en_US). The `rowLevelSharingSource` parameter takes a string, which is the API name for the object to inherit sharing from. In this example, the parameter specifies to inherit the Salesforce sharing settings on the Opportunity object.
        
        ```
        "reg": {
          "action": "sfdcRegister",
          "parameters": {
            "source": "Opportunity_final",
            "name": "Opportunity w/ Account",
            "alias": "Oppty_w_Acct",
            "rowLevelSharingSource": "Opportunity",
            "rowLevelSecurityFilter": "'OwnerId' == "$User.Id""
          }
        },
        ```
        
        ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-analytics-bi-264-0-0-production-enus/ec791473-f5b4-4f64-a656-9104f455d966/images/icon_note.png)
        
        Note Only inherit sharing settings from objects extracted using the sfdcDigest transformation.
    2. Specify the security predicate in the `rowLevelSecurityFilter` parameter of the `rowLevelSharingSource` parameter. In the example, when sharing limits are exceeded, users see only the opportunities that they own. Set the security predicate to `false` to block all users not covered by sharing.

## Configure Datasets

Update the sharing inheritance settings for datasets on the edit dataset page.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-analytics-bi-264-0-0-production-enus/ec791473-f5b4-4f64-a656-9104f455d966/images/icon_note.png)

Note The settings in the dataset and dataflow must match. If they don’t, you receive the warning, "The sharing source and security predicate in this dataset version must be the same as in the dataflow."

1. Edit the dataset. For more information, see [Edit a Dataset](https://help.salesforce.com/s/articleView?id=analytics.bi_dataset_edit.htm&release=264.0.0&type=5 "Edit a dataset to change its name, app, security, or extended metadata (XMD). You can also replace data in a dataset, restore it to a previous version, or delete it. The dataset edit page also provides key information about when the dataset was created and last updated, and where it is used.").
2. Click the pencil under Sharing Source.
    
    ![Enter object name in Sharing Source field on the dataset edit page](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-analytics-bi-264-0-0-production-enus/ec791473-f5b4-4f64-a656-9104f455d966/bi/images/bi/bi_security_edit_dataset_page_sharing.png)
3. Select the object to inherit sharing settings from. Only valid objects are displayed in the list. For example, the primary key of the object must be a field in the dataset.
4. Optionally, click the pencil under Security Predicate. The security predicate is the row visibility fallback when you exceed sharing inheritance limits, described [here](https://help.salesforce.com/s/articleView?id=analytics.bi_security_datasets_sharing_limits.htm&release=264.0.0&type=5 "Here are some things to consider when working with sharing inheritance.").
    1. Add your security predicate in the syntax described in [Add Row-Level Security with a Security Predicate](https://help.salesforce.com/s/articleView?id=analytics.bi_security_datasets_predicate_considerations.htm&release=264.0.0&type=5 "Applying a predicate to a dataset is more than just defining the predicate expression. You must also consider how the predicate depends on the information in the dataset and where to define the predicate expression."). The default on existing datasets is `false`, so users not covered by sharing inheritance have no record visibility.