This policy ensures that a user can only view records (for example, Opportunities) that
they’re explicitly designated as the owner of.
Required Editions
| Available in: Lightning Experience |
| Available with Sales with Agentforce 1 Edition or Agentforce for Sales Add-On
license in: Enterprise, Performance, and Unlimited Editions. |
| User Permissions Needed |
| To manage Data 360: |
Data Cloud Architect |
| To manage Sales Insights: |
Sales Insights User permission set |
| To use Sales Insights: |
Tableau Next Limited Consumer |
-
Determine which data DMO to include in the policy. The policy must be applied to the
primary DMO that contains the record ownership field.
|
|
|
|---|
| DMO |
ssot__Opportunity__dlm |
| Description |
The fact object containing sales opportunity details. |
| Controlling Field (User Context) |
ssot__OwnerId__c (Record Owner ID) |
-
Add Policy/Author
-
Navigate to the Data Governance tab in Data 360 and create a new Data
Policy.
-
Set the Resource to Record.
-
Select the DMO: ssot__Opportunity__dlm.
-
Set the Action to Deny. (This is often used to override the default "Allow All" policy,
or you can use an Allow policy that explicitly filters.).
-
Define the Condition (the security predicate):
-
Set the rule to Deny access to the record unless the record's owner matches the logged-in
user.
- Condition Logic: ssot__Opportunity__dlm.ssot__OwnerId__c Is Not
Equal To $User.ssot__Id__c
Interpretation: If the opportunity owner ID doesn’t match the logged-in user's ID, deny
access to that record.
