A life sciences company stores sales rep performance scorecards in a custom object. Each scorecard must be visible only to the rep, the rep's manager, and the executives above that manager. Reps must also be blocked from seeing the executive comment fields on their own scorecard. What should the Platform App Builder do to satisfy both requirements?
- Set the sharing model to Private and grant record access through the hierarchy; control field visibility with record types and field-level security.
- Set the sharing model to Private and grant record access through custom settings; control field visibility with page layouts and field-level security.
- Set the sharing model to Private and grant record access through the hierarchy; control field visibility with field-level security.
- Set the sharing model to Private and grant record access through custom settings; control field visibility with record types and page layouts.
Show answer
Answer: C
Why: Two restrictions apply at once: the record must follow the reporting chain upward, and one field on it must stay hidden from the rep. A Private org-wide default starts with no access beyond the owner, and 'Grant Access Using Hierarchies' automatically opens each record to the users above the owner in the role hierarchy. Field-level security is the feature that actually hides a field from a profile or permission set, regardless of layout, reports or API. Reference: Organization-Wide Sharing Defaults