Permission Levels & Record Access

A profile's permissions are set per resource and combine three controls.

Navigation visibility

Each navigation group (CRM, Commerce, Content, Rules & Automation, and so on) has a visibility toggle that controls whether it appears in the user's sidebar. Turn a group off to hide it entirely from that profile.

Access level

For each resource within a group, choose how much the user can do:

• View — see existing records; no changes.

• Edit — view and modify records.

Some resources (such as the Dashboard) are view-only.

Record access scope

For record-based resources, set which records the user can act on:

• All records — every record in the tenant.

• Created by them — only records the user created.

• Created or assigned to them — records the user created or that are assigned to them.

Record scope is how you keep a CSR or partner limited to their own book of business while still giving them Edit access to the records they own.