Larry Tung

@adam17amo @ch_sz_knapp @LouiseLockie @adam17amo, see trailhead.salesforce.com/trailblazer-co… Short answer: we support/secure Lightning (and API). Can't comment for end-users in Classic. It might work, but may not work in all scenarios and is unsupported.

@ch_sz_knapp @LouiseLockie Such a crazy requirement! @TungLarry do you know why disabling Classic is required for restriction rules?

"Restriction Rules are a Disruptor but a good one" @LouiseLockie explaining this new concepts and also considerations for using Restriction Rules. The most intriguing one: Classic must be turned off

Want some hands-on challenges on troubleshooting and configuring object, record, and field access? See: trailhead.salesforce.com/content/learn/… I just finished the User Access Specialist Super Badge and recommend it! @CherFeldman @jenwlee @marks_ella @SalesforceAdmns #AwesomeAdmins

If we only create one new permission (for Queues), would it be... More context: ideas.salesforce.com/s/feed/0D58W00… (prefer folks interact on IdX since this poll length is for 7 days). @CherFeldman @SalesforceAdmns #AwesomeAdmins @SalesforceArchs

@kranzforce @CherFeldman @SalesforceDevs Hi @kranzforce, would you be willing to create an idea on ideas.salesforce.com (unless one exists)? Today, are you using apex or another solution to mark a claim "excluded," such that the claimant can't access it?

@CherFeldman @SalesforceDevs thank you, I'd appreciate that! to give a concrete example of the use case: an object that tracks insurance claims, if one of the claimants happens to be an employee who happens to be a user, that user needs to be restricted from accessing the record.

Excited to be heading back to San Francisco this week to plan more amazing features for #AwesomeAdmins and @SalesforceDevs. So what’s on your mind. What are you excited about? Which features are on your wishlist.

#awesomeadmins - I want to make sure you know about a few sessions at #TDX23 that will be all the good stuff and no fluff that you love and ROADMAPS. Discover the Future of User Management reg.salesforce.com/flow/plus/trai… Dive into the Record Access (sharing) Roadmap reg.salesforce.com/flow/plus/trai…

Hey @SalesforceDevs and @SalesforceArchs you will like these two sessions as well. @TungLarry @GambinoGonzalo and I will be sharing roadmaps and how we are all living True to the Core. #TTTC #TDX23

@itsmejanet_e wish had been able to see you present at TDX! Toward the end of your session, saw you presenting on use cases for Restriction Rules.

@_andrewrusso @BrendaGlasser @natehossner regarding list view sharing (all users includes external users); Andrew and Brenda want additional defaults when communities is enabled.

@BrendaGlasser @TungLarry It’s WAYYYYY to easy to make accidental list views that get exposed in communities.

Want to help shape the admin experience for sharing and specifically public groups and queues? Fill in sfdc.co/PublicGroupQue… (last section has an option to be interviewed). Thank you! @anubhadubey @jenwlee @CherFeldman @SalesforceAdmns #AwesomeAdmins

@goravseth @CherFeldman I hear you; will check with the team regarding level of effort. I don't hear this ask often (ideas.salesforce.com/s/idea/a0B8W00…) but do agree this would be very useful. Gorav, would this be a higher priority for you: ideas.salesforce.com/s/idea/a0B8W00…

Hey, #AwesomeAdmins, I'm getting ready to plan with my team in December. Below are the features my team covers. What is something you would like to see improved in my feature area? I can't guarantee it will make it to my roadmap, but curious as to what's on your mind.

@Nads_P07 @CherFeldman @jlange118 "full access" shows up in the sharing hierarchy before pressing "view." The reasons appear after pressing "view" on a given user.

@TungLarry @CherFeldman @jlange118 Thanks for clarifying Larry! Quick question: Based on the doc you shared, the reason mentioned for MAD or VAD perm is Administrator. But you said it should be Full access. Am I missing something?

@VerizonSupport And Verizon Support cannot create a case on my behalf (as I've already spent more than an hour with two Verizon reps)? Given I put in my home address and phone number into the order and you have a screenshot of that as well (along with my email and twitter).

@TungLarry We want to ensure we are able to do everything that we can. As we only have access to preexisting accounts over this platform, please contact our online order team for further assistance. -Lorenzo

@Verizon @VerizonSuport tried your online order verification, phone number/fraud team, & chat. No luck in purchasing a case. Can DM you the order number or attached receipt/emails.

@VerizonSupport Can't believe I'm told to call online orders (after having talked to two fraud folks, 2 chat folks, and two folks on twitter. Was there no one who can chat with me and see the order I've submitted :(

@TungLarry We'd be happy to look into this further for you. Please follow and DM us for assistance. *Cynovia

@ravi0389 @CherFeldman @Nads_P07 @michaelforce @jlange118 When a user has "Modify All Data" permission, from Sharing Hierarchy (lightning action), you'd see a "Full access" in the list of reasons. See: help.salesforce.com/s/articleView?…

@CherFeldman @Nads_P07 @michaelforce @jlange118 @TungLarry i hope sharing is over record level and it reflects the user based record access like roles or apex sharing or manual sharing . modify all data is more of a crud based and it will not reflect in the sharing table . it opens access to record before even coming to record lvl

@VerizonSupport Hi VerizonSupport, Cynovia, I have shared screenshots of the emails I have received. Hopefully you can help since the fraud team, chat reps, and order status page all weren't helpful (or weren't working).

@michaelforce @jlange118 When you click on "View" in the Sharing Hierarchy, there is an "administrator" (reason) if you have the MAD perm: help.salesforce.com/s/articleView?…

@PhilW_SF @asksalesforce Hi @PhilW_SF, are you looking for ideas.salesforce.com/s/idea/a0B8W00… or something more specific for Communities? Having criteria based field concealment will be a multi-team effort across multiple teams.

@asksalesforce This isn't really a support thing, it's a question about platform architecture. I just don't know who would be the product manager behind this part of the platform. I guess I will raise a partner case for a tech discussion.

Hey @asksalesforce any idea why PII protection (admin.salesforce.com/blog/2021/prot…) is only available on the User object? A lot of PII information is typically stored on the associated Contact when considering "External Users" for Digital Experiences...

@itsmejanet_e @CherFeldman No problem. Anytime @CherFeldman gets credit for anything my team does, its not a bad thing LOL! :) I'm going to share your feedback with our team!

@CherFeldman @TungLarry Thanks @TungLarry! Sorry I got the PM wrong but I did want to give a shout out when y'all do something that really helps me provide a nice solution for a client.

Found a perfect use case for #Salesforce Restriction Rules 🤓 Solves an issue I was trying to figure out & I don't have to change the data model or settle for switching the records to read only. Thanks @CherFeldman 😉

@adam17amo @sfdc_mike @jenwlee @salesforce If you're viewing a record, doing a search, list view, report, ... we first check if you have access; then later, filter out records that don't meet the record criteria.

@adam17amo @sfdc_mike @jenwlee @salesforce Sharing grants access (either through OWD or rules, which adds to the share table). Restriction Rules are applied at runtime, meaning we don't adjust the share tables. This means someone looking at the share table may get the wrong assumption if a restriction rule blocks access.