---
schema_version: "1"
id: 1fbb79e58a527ca427f8a87e8f3a2f444c43ce6500551d64555be0f55bc6c9db
title: Custom Object Security
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/dev_security.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.dev_security.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: f3e3ac5254072d2b1f30ac162c3070acad9af8d812cdfcc925ab7ef130ea282b
description: Learn how security settings work together so you can control access to your custom objects with great flexibility.
products:
  - Salesforce Platform
  - Security
release: "264"
---
# Custom Object Security

Learn how security settings work together so you can control access to your custom objects with great flexibility.

### Required Editions

![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-extend_click-264-0-0-production-enus/5f7d9219-b7b1-4552-8891-f1aba9b289fc/images/icon_important.png)

Important Where possible, we changed noninclusive terms to align with our company value of Equality. We maintained certain terms to avoid any effect on customer implementations.

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition">
      <colgroup>
        <col>
      </colgroup>
      <tbody>
        <tr class="">
          <td class="slds-cell-wrap" style="vertical-align:top;">Available in: both Salesforce Classic and
            Lightning Experience</td>

        </tr>
        <tr class="">
          <td class="slds-cell-wrap" style="vertical-align:top;">
            <p>Available in: <strong>Contact Manager</strong>, <strong>Group</strong>, <strong>Professional</strong>,
              <strong>Enterprise</strong>, <strong>Performance</strong>, <strong>Unlimited</strong>, <strong>Developer</strong>, and
              <strong>Database.com</strong> Editions
            </p>
            <p style="margin-bottom:0;">Tabs aren’t available in <strong>Database.com</strong>.</p>
          </td>

        </tr>
      </tbody>
    </table>

Set custom object security at the following levels

- Tab—display the custom tab for the appropriate users based on their user profiles.
- Object—set the access users have to create, read, edit, and delete records for each object.
- Records—set the default sharing model for all your users. This determines the access users have to custom object records that they don’t own.
- Relationship—for objects on the detail side of a master-detail relationship, specify the sharing access that users must have to the master record in order to create, edit, or delete the associated detail records. This is specified in the Sharing Setting attribute of the master-detail relationship field on the detail object.
- Fields—set the level of access users have to fields on your custom object page layout.

These requirements apply to custom objects with no master-detail relationship.

 
| Action | Required Privileges |
| --- | --- |
| Create a record | Create permission. The user must have the tab displayed to create a record from the Create New dropdown list in the sidebar. |
| View a record | Read permission and Public Read Only or Public Read/Write sharing model if not the record owner. |
| Edit a record | Edit permission and Public Read/Write sharing model if not the record owner. |
| Delete a record | Delete permission and must be the record owner or above the record owner in the role hierarchy. |

These requirements apply to custom objects that have a master-detail relationship with a standard or custom object.

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
      <colgroup>
        <col>
        <col>
      </colgroup>
      <thead class="slds-text-title_caps ">
        <tr class="">
          <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d117002e176">Action</th>
          <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d117002e179">Required Privileges</th>
        </tr>
      </thead>
      <tbody>
        <tr class="">
          <td data-label="Action" class="slds-cell-wrap" style="vertical-align:top;" headers="d117002e176 ">Create a record</td>

          <td data-label="Required Privileges" class="slds-cell-wrap" style="vertical-align:top;" headers="d117002e179 ">Create permission and either read or read/write access to the related master record,
            depending on the value of the Sharing Setting attribute of the master-detail relationship
            field on the detail object.</td>

        </tr>
        <tr class="">
          <td data-label="Action" class="slds-cell-wrap" style="vertical-align:top;" headers="d117002e176 ">View a record</td>

          <td data-label="Required Privileges" class="slds-cell-wrap" style="vertical-align:top;" headers="d117002e179 ">Read permission and read access to the related master record. If the record has two
            master records in a many-to-many relationship, the user must have read access to both master
            records.</td>

        </tr>
        <tr class="">
          <td data-label="Action" class="slds-cell-wrap" style="vertical-align:top;" headers="d117002e176 ">Edit a record</td>

          <td data-label="Required Privileges" class="slds-cell-wrap" style="vertical-align:top;" headers="d117002e179 ">Edit permission and either read or read/write access to the related master record,
            depending on the value of the Sharing Setting attribute of the master-detail relationship
            field on the detail object.</td>

        </tr>
        <tr class="">
          <td data-label="Action" class="slds-cell-wrap" style="vertical-align:top;" headers="d117002e176 ">Delete a record</td>

          <td data-label="Required Privileges" class="slds-cell-wrap" style="vertical-align:top;" headers="d117002e179 ">
            <p>Delete permission and either read or read/write access to the related master record,
              depending on the value of the Sharing Setting attribute of the master-detail relationship
              field on the detail object. </p>
            <p style="margin-bottom:0;">When a user deletes a record that has related custom object
              records, all related custom object records are deleted regardless of whether the user has
              delete permission to the custom object.</p>
          </td>

        </tr>
      </tbody>
    </table>

Delegated administrators can manage nearly every aspect of specified custom objects, but they can’t create or modify relationships on the object or set organization-wide sharing defaults.