---
schema_version: "1"
id: 896d687029e7261567d5d6891ad11c4f514a92cc64e4fed1ce719a3913982497
title: CRM Analytics Security Implementation Guide
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/analytics/264-0-0/bi_security_implementation_guide.md
canonical_url: https://help.salesforce.com/s/articleView?id=analytics.bi_security_implementation_guide.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: bda418ed7914063cc5dee2d19d3ab24f5329cace44fba483c235dfac0149f857
description: CRM Analytics has different levels of security that your organization can implement to ensure that the right user has access to the right data.
products:
  - CRM Analytics
  - Cross Cloud
release: "264"
---
# CRM Analytics Security Implementation Guide

CRM Analytics has different levels of security that your organization can implement to ensure that the right user has access to the right data.

![Image shows different points at which you can implement security on Salesforce data, dataset records, and datasets, lenses, and dashboards.](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-analytics-bi-264-0-0-production-enus/ec791473-f5b4-4f64-a656-9104f455d966/bi/images/bi/bi_security.png)

- The administrator can implement object-level and field-level security to control access to Salesforce data. For example, the administrator can restrict access to prevent the dataflow from loading sensitive Salesforce data into datasets. This document describes how CRM Analytics uses object-level and field-level security on Salesforce data and how to configure permissions on Salesforce objects and fields.
- Dataset owners can implement row-level security on each dataset that they create to restrict access to it’s records. If a dataset does not have row-level security, users who have access to the dataset can view all records. This document describes how to configure row-level security on datasets and provides some sample implementations based on datasets created from Salesforce data and external data.
- App owners, administrators, and users granted manager access to an app control access to datasets, lenses, and dashboards within apps. This document describes the different levels of access for apps and how to share datasets, lenses, dashboards in an app with other users.
    
    ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-analytics-bi-264-0-0-production-enus/ec791473-f5b4-4f64-a656-9104f455d966/images/icon_note.png)
    
    Note CRM Analytics supports security predicates, a robust row-level security feature that enables you to model many different types of access controls on datasets. Also, CRM Analytics supports sharing inheritance, to synchronize with sharing that’s configured in Salesforce, subject to certain limitations. If you use sharing inheritance, you must also set a security predicate to take over in situations when sharing settings can’t be honored.