Workforce Insights | Data visibility and security

In Salesforce CRM Analytics, by default a user who can access a dataset has access to all records in it. When creating datasets and dashboards, row-level security on the dataset can be implemented with sharing inheritance and security predicates:

• Sharing inheritance applies an object's sharing logic to a row in the dataset.

• Security predicates are manually assigned filter conditions to define access to a dataset row.

Workforce Insights dashboards use security predicates to determine who can view the data in the dashboards based on the datasets.

In the beta release, no security predicates are applied to the C suite dashboards. Data security is managed with the Sage People Workforce Insights C-Suite Viewer permission set, which controls access to the Visualforce page hosting the dashboards.

The team lead dashboards apply a security predicate based on the manager's User Id. When a manager views the team lead dashboards, they can only view data for the team members whose manager they are, and the reporting lines below those team members. Access to team leader dashboards is also controlled with the Sage People Workforce Insights Org Chart permission set, which controls access to the WX process hosting the dashboards.