At Bloomington Caregivers, care coordinators can only view patient records they own in Health Cloud. Moving forward, a small subset of auditors need access.
What should a consultant do to expand this access?
A.
Create a restriction rule for the Person Account object.
B.
Create a user access policy with grant permissions.
C.
Create a criteria-based Account sharing rule.
D.
Update organization-wide default for Account and Contract to Public Read-Only.
“Use criteria-based sharing rules to grant additional access to Person Account (patients) records for users or groups who do not own the records, such as auditors.”
[Reference: Salesforce Security Guide – Sharing Rules, Other Options:, Restriction rule: Restricts, not expands, access., User access policy: Not a Salesforce standard for sharing data., Changing org-wide default to Public Read-Only: Not best practice for PHI and patient data—should use sharing rules for scoped access., ]
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit