---
schema_version: "1"
id: 14938a39efce35cad9b025be66fcd851e21be8bd77c20e23bc5d15615eeeeedd
title: Organization-Wide Sharing Defaults
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/security_sharing_owd_about.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.security_sharing_owd_about.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 4cb2d0d238e1cbcd6cddd074f56011297697e94bb388ba803c4caccdc566fd27
description: Define the default access that users have to records they don't own with organization-wide sharing settings. Organization-wide sharing settings can be set separately for custom objects and many standard objects. You can set different levels of access for internal and external users.
products:
  - Security
  - Salesforce Platform
release: "264"
---
# Organization-Wide Sharing Defaults

Define the default access that users have to records they don't own with organization-wide sharing settings. Organization-wide sharing settings can be set separately for custom objects and many standard objects. You can set different levels of access for internal and external users.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: both Salesforce Classic and Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Professional</strong>, <strong>Enterprise</strong>, <strong>Performance</strong>, <strong>Unlimited</strong>, <strong>Developer</strong>, and <strong>Database.com</strong> Editions.</td></tr></tbody></table>

![Tip](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/images/icon_tip.png)

Tip Setup with Agentforce can help you manage organization-wide sharing defaults more efficiently. For more information, see [Setup with Agentforce](https://help.salesforce.com/s/articleView?id=xcloud.setup_agentforce_overview.htm&language=en_US) and [User Access Management in Setup with Agentforce](https://help.salesforce.com/s/articleView?id=xcloud.setup_agentforce_user_access.htm&language=en_US).

Watch how you can restrict access to records owned by other users.

For most objects, organization-wide sharing settings can be set to Private, Public Read Only, or Public Read/Write. When the organization-wide sharing setting for an object is Private or Public Read Only, an admin can grant users additional access to records by configuring other record access features, like the role hierarchy or sharing rules. However, other record access features can only be used to grant additional access—they can’t be used to restrict access to records beyond what was originally specified with the organization-wide sharing defaults.

For information on designing your sharing setup to improve performance and speed up sharing changes, see the [Designing Record Access for Enterprise Scale](https://developer.salesforce.com/docs/atlas.en-us.draes.meta/draes/draes_preface.htm) guide.

![Example](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/images/icon_example.png)

Example For example, to allow for easier collaboration, you want all your internal users to be able to see (but not edit) all accounts and opportunities regardless of their owner. You set the default internal access level to Public Read Only for both accounts and opportunities. For leads, you want a more restricted access setting so that there's no potential for internal competition. You set the access level for leads to Private. That way, only the record owner, users above the owner in the role hierarchy, Salesforce admins, and users who have access via sharing can access it.

For your default external access, you only want some external users, such as Partner users, to have access to accounts and orders they don't own, and only to certain records. You set the default access level to Private for both accounts and orders. You then open up access as needed using sharing rules.

- **[Set Your Internal Organization-Wide Sharing Defaults](https://help.salesforce.com/s/articleView?id=platform.admin_sharing.htm&release=264.0.0&type=5)**  
    Internal organization-wide sharing defaults set the baseline access for your internal users for your records. You can set the defaults separately for different objects.
- **[External Organization-Wide Defaults Overview](https://help.salesforce.com/s/articleView?id=platform.security_owd_external.htm&release=264.0.0&type=5)**  
    External organization-wide defaults provide separate organization-wide defaults for internal and external authenticated users to help you better secure your data.
- **[Organization-Wide Default Access Settings](https://help.salesforce.com/s/articleView?id=platform.sharing_model_fields.htm&release=264.0.0&type=5)**  
    For most objects, you can assign default access to Controlled by Parent, Private, Public Read Only, or Public Read/Write. Other access levels, like Public Full Access and View Only, are available for only specific objects.
- **[Default Organization-Wide Access Levels](https://help.salesforce.com/s/articleView?id=platform.security_sharing_owd_default_settings.htm&release=264.0.0&type=5)**  
    Review the default organization-wide access levels for each object.