Hello, this is ohya.

Having concluded the automation series, from now on...A series of challenges in the PL-200 practical problems.Let's get started!
We will use points that you might find "a bit complicated..." in actual mock exams or practical work as material for our lessons.

🛠 This time's wall

"I want to grant users access rights, but I'm confused about the difference between security roles and sharing..."

This often appears in PL-200 problems 👇

• ▷ "How can I show only specific records to user A?"
• ▷ "What if I want to give the same authority to the entire department?"

1. What are security roles?

Security roles are a mechanism that determines "what operations can be performed and to what extent."
Example: Sales Representative Role = Can "create/read/update" the sales opportunities they own.

There are 5 levels of permission 👇

• ▶User
• ▶Business Unit
• ▶Parent-child business unit
• ▶Organization
• ▶None (No permission)

2. What is sharing?

Sharing isSpecific record unitHow to grant access rights.
Example: I only want to show my colleague negotiation X → Share that record.

💡 Points

• ▷ Useful for temporarily granting permissions
• ▷However, too much sharing can lead to chaos in management.

3. How to use them in practice

• ▶Apply the same rules to the entire department → Security Role
• ▶I only want to show some of the records → Total
• ▶The basic principle of permission design is security roles; sharing should be used only as an exception.

4. Common experiences with the PL-200 exam

A common thing in practice problems is...
"User A can see their own deals, but not other users' deals. How can we make all departmental deals visible to each other?"
→ The answer is "Set security roles to business unit scope."
(Not shared!)

5. Summary

• ▷Security roles areBroad and basic access control
• ▷ShareIndividual exceptions
• ▷The PL-200 often asks questions that involve the "organization vs. department vs. user" dynamic.