Keep each Business Unit’s default access restricted. Don’t give both BUs broad security-role access, because that could expose records that should remain private.
For records that need to be shared, use an Access Team. Add the required users to the Access Team and give them only the permissions they need, such as Read or Write. The users can belong to different Business Units.
Example:
- Sales BU owns customer records.
- Support BU normally cannot see them.
- When Support needs access to one customer record, add the required Support users to an Access Team for that record.
For a larger, defined group that needs access to many records, an Owner Team may be a better option.
| Approach | Best for |
| Access Team | Sharing specific records with selected users |
| Owner Team | A defined group that needs access to many records |
| Manual sharing | A few exceptional cases |
In short
Business Units = separate the data.
Access Teams = share selected records.
Owner Teams = manage access for a defined group.
