Control objects, records and fields
Combine roles, permission sets, public groups and territories to define access. Hide fields or make them read-only or editable. Administrators can inspect access decisions, with audits for policy and sharing changes.