You can achieve full or limited access to records by using data access rules.
To control access to a whole record, create a data access rule at the record level. To control access to a partial record, create a data access rule at the attribute level.
Record-level data access rule
You can allow or deny user access to records. A record-level data access rule controls access to all the records that meet the conditions in the data access rule.
For example, configure a data access rule for a user role to allow access to records that have the postal country as the United States of America. When a user with the user role logs in to a business application and searches for records, the user can see only those records that have the postal country as the United States of America.
Attribute-level data access rules
You can allow or deny user access to specific attributes or field groups of records. An attribute-level data access rule controls access to the selected attributes and field groups of all the records that meet the conditions in the data access rule.
You can define data access rules in terms of who is denied access, who is allowed access, or both. Familiarize yourself with the behaviors of each approach and create an overall plan. For maintenance purposes, it can be more straightforward to use only one type of rule.
For example, configure a data access rule for a user role to deny access to phone numbers. When a user with the user role logs in to a business application and searches for records, the user can view all the details of records except the phone numbers.
Note:
If you use a searchable hierarchy as a hierarchy filter, ensure that you don't apply attribute-level access rules to the business entities that are part of the hierarchy.
If you configure a field as facetable, ensure that you follow the guidelines listed below:
•Ensure that you don't create data access rules with Deny permission for the field or associated field group.
If you don't follow the preceding guidelines, the facetable field don't appear in the filters panel when the user searches for records in the business applications.