Apex-Managed Sharing

Real-World Example

Why Apex-Managed Sharing Matters

Apex-Managed Sharing is a programmatic approach to controlling record access in Salesforce that goes beyond the standard role hierarchy and sharing rules. Instead of relying solely on declarative sharing configurations, developers use Apex code to dynamically grant or revoke access to specific records for specific users based on custom business logic. This is essential when sharing rules need to be highly conditional, based on complex criteria that can't be expressed through the standard UI, or when sharing decisions must happen in real-time as data changes. Apex-Managed Sharing allows developers to implement the `SHARING` keyword in Apex classes and use the `Share` objects (like `AccountShare`, `OpportunityShare`, etc.) to create or delete sharing records programmatically.

As organizations scale, the limitations of declarative sharing become apparent—role hierarchies can become unwieldy, sharing rule conditions can't capture all business nuances, and manual admin work doesn't scale to thousands of records or complex scenarios. Without proper Apex-Managed Sharing implementation, companies risk either over-sharing data (security risk), under-sharing data (productivity loss), or burning through admin resources maintaining manual sharing. When Apex-Managed Sharing is implemented incorrectly—such as forgetting to query existing shares before creating duplicates, not handling the delete of shares when access should be revoked, or failing to consider performance implications of sharing thousands of records—it can lead to data visibility errors, governor limit violations, and degraded system performance. Proper Apex-Managed Sharing solutions include robust error handling, considers bulk operations, and monitors the health of sharing records over time.

How Organizations Use Apex-Managed Sharing

• TechVenture Solutions — TechVenture Solutions, a software reseller, needed accounts to be automatically shared with specific account executives based on geographic territory and customer size tier. Using Apex-Managed Sharing, they built a trigger on the Account object that evaluated the ShippingCountry and AnnualRevenue fields, then programmatically created AccountShare records for the appropriate territory manager. This eliminated manual sharing work and reduced the time sales reps waited for access to assigned accounts from days to seconds, improving deal velocity.
• HealthCare Partners Inc — HealthCare Partners Inc operates multiple clinics and needed to implement complex HIPAA-compliant sharing where patient records (custom Case object) could only be accessed by clinicians at specific locations. They developed an Apex-Managed Sharing solution using a trigger that evaluated a patient's clinic assignment and dynamically shared records only with users whose clinic matched that assignment. When patients transferred clinics, the trigger automatically revoked access from the old clinic's users and granted it to the new clinic, ensuring compliance without manual intervention.
• Finley Capital Group — Finley Capital Group needed investment opportunities (Opportunity records) to be shared with advisors based on a calculated investment score and advisor expertise tags stored in a custom object. They built an Apex batch job that ran nightly to evaluate opportunities against advisor qualifications, and used Apex-Managed Sharing to create or delete OpportunityShare records based on the latest eligibility data. This allowed them to automatically distribute opportunities to the best-matched advisor without manual assignment, increasing close rates by 23%.