Config-Based Sharing: Manual Shares, Teams and Territories
Chapter 9 of Securing Salesforce: Sharing and Visibility, Part 2: The File Cabinets: Sharing Records. New to the course? Start with chapter 1.
Chapters 7 and 8 opened records by rule: every record that matches, every record a team owns. But some needs aren’t a pattern. A coworker is covering a case while its owner is away. A specialist needs one opportunity for a week. The people who work an account change from account to account. And some companies have thousands of sales buckets, far past what rules can hold.
This chapter is the ways you set up without writing a rule: a manual share for one record, a team on each record, territories for accounts by region or segment, and, in the industry clouds, Compliant Data Sharing. Then it asks the question a student once asked me that I couldn’t answer on the spot: when the record changes owner, which of these survive?
The ideas in this chapter
Section titled “The ideas in this chapter”- A manual share is a one-off exception. One record, shared by hand, that no design document lists, and it goes when the owner changes, by default.
- Teams sit between rules and manual shares. Each record carries its own list of people, each with a role and an access level, on a screen everyone can read.
- Three kinds of team, three sets of nuances. Account, opportunity and case teams each work a little differently.
- Territories are buckets that scale. Up to 1,000 per model, more on request, but they work on accounts.
- Two hierarchies, one account. Roles and territories both grant upward, at the same time; give each its own job.
- Compliant Data Sharing adds access by role, with roles a compliance team controls, in Financial Services Cloud, Nonprofit Cloud and Public Sector Solutions.
- Every way gets one of three answers on an owner change: it moves with the owner, it goes unless you keep it, or it stays.
- Test it with three users: the old owner, the new owner, and the person who should keep or lose access.
The picture
Section titled “The picture”Here’s the chapter’s biggest idea: two hierarchies granting the same account.
And the question every one of these ways has to answer.
The path through this chapter
Section titled “The path through this chapter”Six modules, each standing on its own.
- Manual Sharing: One Record, Shared by Hand. Who can share; who it can go to, and how much; the account family; where it doesn’t work; too many by hand; when the share goes.
- Teams: Account, Opportunity and Case Teams. Account teams; opportunity teams; case teams; when the account changes owner; supercharging a team with automation.
- Sales Territories: Models, Types and Assignment Rules. The pieces; one active model at a time; which territory gets the account; when the rules run; users in territories and what they get; your own buckets, by automation.
- Two Hierarchies, One Account: Territories and Roles Together. Two paths to the same account; what each hierarchy should model; overlays; who runs the territories.
- Compliant Data Sharing: Participants, Roles and Groups. What it is; the pieces; when a share row is written; it adds access and can’t take any away; limits; teams or Compliant Data Sharing.
- What Survives an Owner Change: Every Way Side by Side. Three kinds of answer; what moves, goes and stays; an account carries its family; when your automation doesn’t run; the three-user test.
Then check what stuck with the study guide.
What an architect decides here
Section titled “What an architect decides here”- Who may share by hand, where manual shares are becoming a pattern, and who reviews them.
- Which objects use teams, which kind, the team roles and their access, and whether automation fills them and who it runs as.
- Whether accounts need territories at all, and if so the types, the model lifecycle and the assignment rules.
- What each hierarchy models: roles for the reporting structure, territories for the sales structure, never identical.
- In an industry cloud, whether Compliant Data Sharing replaces teams, and who owns its participant roles.
- For every way the org shares a record, what happens on an owner change, and whether Keep manual shares, Keep account team and Keep Opportunity Team are used.
- The three-user test for every way that changes owners: the screen, mass transfer, integrations and agents.
Beyond the exam: what AI changes. Every way in this chapter is something an agent can do in one step: share a record by hand, add someone to a team, change the field a territory rule reads, reassign a record. None of it shows up in a design document. If agents can do these things, decide who they act for, what they may share and give, and how you’ll find what they did. And before an agent transfers records, know which shares go with the old owner. Chapter 20 covers agents.
Explore
Section titled “Explore”Each module lists its own sources. Two to start with:
- Manual Sharing (opens in a new tab), Salesforce Help (checked 2026-11-07)
- Considerations for Changing a Record’s Owner (opens in a new tab), Salesforce Help (checked 2026-11-07)
