Skip to main content
Administration

What is Role Hierarchy in Salesforce?

The Role Hierarchy in Salesforce controls record-level visibility by granting users access to records owned by anyone below them in the hierarchy tree.

Clientell AI, the AI Salesforce admin, audits your Role Hierarchy setup in a read-only scan, then drafts the fixes for you to approve. See permission management

Try it in Clientell AI

“Audit my Role Hierarchy setup: show where access is too open, list who has more than they need, and draft fixes for me to approve.”

Clientell reads your org first, drafts every change, and changes nothing until you approve. Platform deployments include rollback. How security works.

Start the 14-day free trial, no card

Term Context

Category

Administration

11 terms in this category

Related Terms

4

connected concepts

Glossary

66

total definitions

How does Role Hierarchy work in Salesforce?

The role hierarchy is one of Salesforce's core data access mechanisms. It works alongside Organization-Wide Defaults: OWD sets the most restrictive baseline (e.g., Private), and the role hierarchy then opens access upward. A VP of Sales assigned to a role above regional managers automatically sees all opportunities owned by those managers and their reports. This cascading visibility applies to standard and custom objects where the OWD is set to Private or Public Read Only.

Role hierarchies should mirror reporting structure, not org charts, because their purpose is data access, not user management. Over-flattening the hierarchy leaves managers blind to their team's records, while over-nesting can create unnecessary sharing calculations that slow performance in large orgs. Clientell AI can visualize your current role hierarchy, compare it against your reporting lines, and suggest restructuring to balance security with usability.

Questions people ask

What is the role hierarchy in Salesforce?

A tree of roles that gives managers access to the records owned by the people below them.

Is the role hierarchy the same as a profile?

No. Roles decide which records a user can see. Profiles decide what a user can do and which fields they see.

Does every user need a role?

No. Roles are optional. A user without a role only sees what the org-wide defaults, sharing rules and ownership allow.

Does the role hierarchy give access to custom objects?

Yes, by default, through the Grant Access Using Hierarchies setting. You can turn it off for a custom object.

Getting Started

Try this on your own org

Start the 14-day free trial, no card. Clientell scans read-only first and changes nothing until you approve.

14-day free trial  ·  No credit card required

SOC 2
HIPAA
GDPR
Salesforce Partner