---
schema_version: "1"
id: 00bce51a91fb33b8cd716176ade7bb05f6d15a11bd6e64f12e24cf74f0968f07
title: Row-Level Security Example Based on Manager Hierarchy
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/sales/264-0-0/sales_insights_manager_hierarchy.md
canonical_url: https://help.salesforce.com/s/articleView?id=sales.sales_insights_manager_hierarchy.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: cf3429cc3b2d63622f92145c4b950ba3c6f168f9fd7b927743a5090b16662e2c
description: This policy is used in organizations where reporting structure is managed by a specific Manager field rather than the formal Role Hierarchy. This also relies on the specialized hierarchy operator.
products:
  - Sales Cloud
release: "264"
---
# Row-Level Security Example Based on Manager Hierarchy

This policy is used in organizations where reporting structure is managed by a specific Manager field rather than the formal Role Hierarchy. This also relies on the specialized hierarchy operator.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available with Sales with <strong>Agentforce 1 Edition</strong> or Agentforce for Sales Add-On license in: <strong>Enterprise</strong>, <strong>Performance</strong>, and <strong>Unlimited</strong> Editions.</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d7847e70">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d7847e70 ">To manage <span>Data 360</span>:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d7847e70 ">Data Cloud Architect</td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d7847e70 ">To manage Sales Insights:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d7847e70 ">Sales Insights User permission set</td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d7847e70 ">To use Sales Insights:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d7847e70 ">Tableau Next Limited Consumer</td>

          </tr>
        </tbody>
      </table>

1. Determine which data DMO to include in the policy. This policy is best applied to fact DMOs that link records to an Owner or User ID.
    
    |  |  |
    | --- | --- |
    | DMO | ssot\_\_Opportunity\_\_dlm |
    | Description | The fact object containing sales opportunity details. |
    | Controlling Field (User Context) | ssot\_\_OwnerId\_\_c (Record Owner ID) |
2. Add Policy/Author
    
    1. In the Data Governance Policy Builder, create a new Data Policy.
    2. Select the DMO: ssot\_\_Opportunity\_\_dlm.
    3. Set the Action to Allow.
    4. Define the Condition using the hierarchy operator against the Manager structure: Set the rule to Allow access to the opportunity record IF the logged-in user is hierarchically above the opportunity owner (based on the Manager field of the user profile).
        
        - **_Condition Logic (Conceptual Implementation):_** **_ssot\_\_Opportunity\_\_dlm.ssot\_\_OwnerId\_\_c Is Hierarchically Above In $User.ManagerId_**
    
    Interpretation: Deny access to the opportunity record if the logged-in user isn’t the manager (or a manager above) of the opportunity owner.