Posted on 0 comments

Financial Services Cloud: an overview of Compliant Data Sharing

1. Introduction

Compliant Data Sharing is a feature added to Financial Services Cloud (FSC) in the Winter ‘21 release. As of the Spring ‘21 release, Compliant Data Sharing is visible in the Actionable Relationship Center (ARC).

2. Business Case

The purpose of Compliant Data Sharing is to enable FSC users to share Account and Opportunity records with team members according to roles. For instance, a Relationship Manager sharing a record with an approved member of their team, for instance, an Analyst that’s been approved to view an Account for an upcoming RFP. (Important Note: Participant Roles are not the same things are traditional Security Roles that you may be familiar with in the Salesforce security model).

3. How It Works

For people familiar with Salesforce’s manual sharing feature, Compliant Data Sharing is very similar. The difference is that Compliant Data Sharing requires users to identify a Participant Roles when sharing a record.

3.1 Administrators create/manage Participant Roles

Administrators define Participant Roles via Compliant Data Sharing (via the Setup menu).

Compliant Data Sharing - Participant Roles

3.2 Users assign Participants

FSC users can view and assign Participants via the Account Participants related list on the Account page layout.

Compliant Data Sharing - Participant Role Assignment

3.3 Viewing participants in ARC

As of Spring ’21, FSC users may view Account Participants in the FSC Actionable Relationship Center (ARC).

Compliant Data Sharing - ARC

3.4 Reporting

Currently, Salesforce Report Builder does not have capabilities to report on sharing data. However, It is possible to access Account sharing and Opportunity sharing data via the Accountshare and Opportunityshare objects, respectively. This can be accomplished by running a SOQL query (via Developer Console, Workbench or a similar developer tool) or by exporting the data (via DataLoader, DataLoader.io, or a similar data tool).

To illustrate, the following SOQL query would generate a result set of all Compliant Data Sharing records for all Account records:

SELECT id, AccountID, Accountshare.Account.Name, RowCause, UserorGroup.Name, accountaccesslevel 
FROM Accountshare 
WHERE RowCause = 'CompliantDataSharing'

Compliant Data Sharing - SOQL

Note: the Participant Role field is not currently available via SOQL or Data Export (as of Summer ’21). This means that while you’ll be able to use SOQL or Data Export to see all records that were shared via Compliant Data Sharing, you won’t be able to view record level Participant Role data using this approach.

4. Configuration Summary

The following is a high level overview of the steps for enabling Compliant Data Sharing (please refer to the Salesforce documentation for detailed steps):

  • Org Wide Defaults: Salesforce Org Wide Defaults for Account/Contact and/or Opportunity should not be set to Public Read Write (otherwise, all internal users would already have full access to the relevant records already).
  • Enable Compliant Data Sharing: administrators can turn on Compliant Data Sharing for the Account object and the Opportunity object via Setup –> Compliant Data Sharing –> Object Enablement Settings 
  • Create Participant Roles: administrators can create Participants Roles via Setup –> Compliant Data Sharing –> Participant Roles 
  • Assign Permissions for relevant users: Users that will be using Participant Roles must be assigned the “Use Compliant Data Sharing” permission. Administrators should create a Permission Set with this permissions (it is under System Permissions when creating the Permission Set). Additional details here. Note: as with some FSC permission configurations, licenses and perm interdependencies can be tricky.   
  • Page Layouts: Update relevant Account page layouts to include the Account Participants related list.

5. References

 

Subscribe to new articles about Salesforce + FinServ

We write about Salesforce for the Financial Services Industry. It’s Free. No Spam. Unsubscribe whenever you want.