Published at: 2026-09-17
Configure external roles and data permissions
The upstream enterprise configures partner access and data scope in layers.
Before you start
[!IMPORTANT] - Confirm that your account can manage Enterprise Interconnection applications and external roles. - Confirm that the downstream enterprise and contacts have been added.
Set the external access scope
- Go to Setup > Interconnection Management > Enterprise Interconnection > Interconnected Applications > Application Information.
- Open External Access Scope.
- Select all downstream enterprises, selected downstream enterprises, or selected connected contacts in selected companies.
- Save the scope.
Assign roles and permissions
- Open the user list for the Partner Connect interconnected application.
-
Assign the Partner User role to downstream users.
-
If the default role is insufficient, create an external role.
- Configure object operation and field permissions for the role.
A downstream user without an assigned role cannot use Partner Connect correctly.
Assign record types and layouts
- Select an object to make available.
- Assign its record types to the external role.
- Assign its layouts to the external role.
- Save the configuration.
Set the data scope
Select an applicable data scope for each object: Private, Company Read Only, Company Read/Write, Public Read Only, or Public Read/Write. Then configure data sharing based on how roles need to collaborate.
Verify the configuration
Test objects, fields, records, and read/write actions with different external roles. After changing permissions, sign in again with a partner account and confirm that the home page and business objects match the intended access.
Expected result
Each role can view and modify only the objects, fields, and records it is authorized to access.