What is OWD in Salesforce?

OWD stand for org by default. It is use for record label security. by default all object status in public. we can change it public to private. if object is private all user can see only own record.

We can restrict the record by OWD as following way.

OWD
Sharing rule
Permission setting
Grand access hierarchy
Manual sharing

OWD:- We make object public and private.

Sharing rule:- we can give record label access to user, it has mainly work two type criteria.
a) Owner wise
b) Field condition wise

Owner wise:- We can give access from two type. First is role and another is create a public group.
Role Wise:- We can give record access by role to another role.
Create a public group:- We need to create a public group and assign some user in this group and give access that group, now that public group can see the record even object is private.

Role hierarachy in Salesforce:-

Once OWD is private then only record owner and above the role hierarachy will be see the record.
By using the role hierarchy we can access the records even object is private.
User who are higher in the role hierarchy will be able to see the records of people below them.
User who are at the same lavel cannot access each other's records.

Grand access using Hierarchies:- there are a check box of every object, if check box is checked then manager can access the data even object is private.

Manual Sharing:- by manual sharing we can give a record access to manual or to user or group of user.

Permission Sets-

Permission works similar as profiles, it’s can also give permission like, object, tab setting, app setting, page layout, record type, etc..

But main difference is that A user can have only one profile but at a same time its can have given some extra and multiple permission by grant additional access.

For example:-

There are many employee working in a team. Each and every member has assign same profile. But my manage want to give some of user extra permission may be some extra app access, field or object, In this case they can create a permission set and assign some particular user.

To know more live demo source code in Salesforce lightning, Trigger, Visualforce & LWC, Use this link..