I currently have a custom object which is set to private in organization-wide default sharing settings. I have created an approval process to allow managers to approve private records.
When the Manager of a user attempts to approve the record, they receive an "Insufficient Privileges" message. Also, when navigating to the object tab, the manager cannot see the records created by their subordinates.
I currently do not have role hierarchies set up in the org. What am I missing here?
Best Answer
If there is no role setup for your org Grant Access Using Hierarchies does not work.
Option 1: Give the manager view all and manage all access (if it is ok to expose all data to the managers). To do this go to their profile and in the object permissions provide view all and modify all next to the create read edit and delete checkbox for the object If Grant Access Using Hierarchies is deselected, users that are higher in the role or territory hierarchy don’t receive automatic access. However, some users—such as those with the “View All” and “Modify All” object permissions and the “View All Data” and “Modify All Data” system permissions—can still access records they don’t own.
Option 2: Ask the users to manually share the data with the manager When you check the buttons once sharing is set to private you can see a sharing button using which you can add a user/ public group who needs to have access to the record.