Zoho CRM sharing rules: test criteria, direction and email visibility

SOURCE-BASED ANALYSIS · NO HANDS-ON RATING

Write the grant in plain language

A Zoho CRM sharing rule extends record access from an owner set or matching criteria to selected roles, subordinates, groups or users. Describe the intended grant before configuring it: which module, source, destination and permission are required, and whether superior access is intended.

Test criteria boundaries

For criteria-based sharing, create one record that matches every condition, one that fails each condition and one that changes from match to non-match. Verify AND and OR grouping explicitly. A broad organization default cannot be narrowed by a sharing rule, so inspect the default permission first.

Include related content and email

Zoho documents that record visibility can expose associated attachments, notes and competitors, and that email sharing has its own access types. Include these related objects in the review. Read-only access to a record does not automatically answer whether a user can reply, forward or edit an email.

1. Capture current organization defaults.
2. Name the source and destination populations.
3. Record criteria and permission level.
4. Test matches, non-matches and changed records.
5. Inspect related notes, files and email actions.
6. Keep the rule owner and review date.

Avoid cumulative-access surprises

A user may receive access through role hierarchy, peer sharing, groups and multiple rules. When a test user can see more than expected, trace every granting path before changing a rule. Preserve evidence of the effective-access check without copying sensitive record content.