How to Set Up Data Sharing Rules in Zoho CRM?
Quick Summary: Data sharing rules in Zoho CRM determine which users and teams can view, edit, or manage records owned by others. Setting these rules correctly protects sensitive customer data, eliminates unnecessary information silos, and ensures every rep works with exactly the access they need — no more, no less. In this article, you’ll learn how data sharing works in Zoho CRM, how to configure the default organization-wide settings, and how to build custom sharing rules for specific roles and groups.
What Are Data Sharing Rules in Zoho CRM and Why Do They Matter?
Most growing sales teams hit a point where not everyone should see everything. A junior rep doesn’t need visibility into enterprise accounts managed by a senior team. Regional managers should see their territory’s deals but not another region’s pipeline. Data sharing rules in Zoho CRM solve exactly this problem — they give administrators precise control over who accesses which records and at what level of permission.
How Does Zoho CRM Organize Data Access?
Zoho CRM builds data access on three interconnected layers:
| Layer | What It Controls |
|---|---|
| Profiles | Feature-level permissions (can this user import records, delete deals, run reports?) |
| Roles | Hierarchical visibility (managers see records owned by their subordinates) |
| Data Sharing Rules | Cross-role access (users outside the hierarchy who need access to specific records) |
Profiles and roles handle the majority of access scenarios. However, data sharing rules address the gaps — situations where a user needs access to records outside their role hierarchy. For example, a marketing team member needs to view all contacts without having a sales management role.
What Access Levels Does Zoho CRM Support in Sharing Rules?
When you create a data sharing rule, you assign one of four access levels:
- Read Only — The user can view records but cannot edit or delete them
- Read/Write — The user can view and edit records but cannot delete them
- Read/Write/Delete — Full access including deletion
- No Access — The user cannot see these records at all (useful for locking down sensitive modules)
How Does the Default Organization-Wide Sharing Setting Work in Zoho CRM?
Before you create specific sharing rules, Zoho CRM asks you to define a baseline access level for each module. This organization-wide default (OWD) sets the floor — the minimum access every user has to records they don’t own.
What Are the Default Sharing Options in Zoho CRM?
Zoho CRM offers three organization-wide defaults for each module:
| Default Setting | What It Means |
|---|---|
| Private | Users see only their own records and records owned by their subordinates in the role hierarchy |
| Public Read Only | All users can view every record in the module but can only edit records they own |
| Public Read/Write | All users can view and edit every record in the module regardless of ownership |
Most organizations start with Private as the default for sensitive modules like Deals and Contacts, then use sharing rules to open up access selectively. This approach follows the security principle of least privilege — start restrictive and grant access where genuinely needed.
Which Modules Support Organization-Wide Defaults in Zoho CRM?
You can configure OWD settings for these core modules:
- Leads
- Contacts
- Accounts
- Deals (Opportunities)
- Cases
- Campaigns
- Custom modules
Notably, activity modules like Tasks, Calls, and Meetings inherit access from their parent records. Consequently, if a user can see a Deal, they also see the activities linked to that Deal — even if they don’t own those activity records directly.
How Do You Configure Organization-Wide Defaults in Zoho CRM?
Adjusting the OWD settings is the first step every administrator should complete before building individual sharing rules. Here’s how to do it in Zoho CRM.
Where Do You Find the Data Sharing Settings in Zoho CRM?
- Click the Setup icon (gear wheel) in the top-right corner of Zoho CRM
- Under the Security Control section, click Data Sharing Settings
- The Data Sharing Settings page displays each module alongside its current default access level
- Click Edit next to any module to change its default
- Select the access level that fits your organization’s baseline policy
- Click Save to apply the change
What Happens to Existing Records When You Change the Default?
Changing the OWD affects all records in that module immediately. Therefore, if you switch Contacts from Public Read/Write to Private, users who previously saw all contacts will lose visibility into records they don’t own — unless a sharing rule specifically restores that access. Always notify your team before tightening OWD settings to avoid unexpected disruption.
How Do You Create Custom Data Sharing Rules in Zoho CRM?
Once your organization-wide defaults are in place, you build sharing rules to extend access beyond what the role hierarchy and OWD provide. Zoho CRM lets you create sharing rules based on roles, groups, or individual users.
What Types of Sharing Rules Does Zoho CRM Support?
| Rule Type | Use Case |
|---|---|
| Role-based rule | Share records owned by one role with another role (e.g., West Coast Sales shares deals with the Pre-Sales team) |
| Role and Subordinates rule | Share records owned by a role and all its subordinates with another role |
| Group-based rule | Share records owned by a user group with another group or role |
| Territory-based rule | Share records assigned to a sales territory with specific users or roles |
Role-based and group-based rules cover the majority of real-world scenarios. Territory-based rules apply specifically to organizations using Zoho CRM’s Territory Management feature.
How Do You Build a Sharing Rule Step by Step?
Follow this process to create a new data sharing rule in Zoho CRM:
- Go to Setup → Security Control → Data Sharing Settings
- Select the module you want to create a rule for (e.g., Deals)
- Scroll to the Sharing Rules section and click Add Sharing Rule
- Give the rule a descriptive name (e.g., “Pre-Sales Team — Read Deals from West Coast Role”)
- Under Records Owned By, select the role, group, or territory whose records you want to share
- Under Share With, select the role, group, or user who should gain access
- Set the Access Level (Read Only, Read/Write, or Read/Write/Delete)
- Click Save
Zoho CRM applies the rule immediately. Users in the “Share With” group gain access to the specified records right away without needing to log out and back in.
How Do You Use Groups to Simplify Sharing Rules?
Managing sharing rules user-by-user becomes unmanageable as your team grows. Instead, create User Groups in Zoho CRM and assign users to those groups. Then build sharing rules at the group level. When a new team member joins, add them to the appropriate group — and they automatically inherit every sharing rule associated with that group.
To create a group: Setup → Security Control → Groups → Create Group. Add users, roles, or even other groups as members. This approach scales cleanly with your organization’s growth.
How Do Roles and Role Hierarchies Interact With Data Sharing Rules in Zoho CRM?
Understanding how role hierarchies and sharing rules interact prevents you from creating redundant rules or accidentally blocking access you intended to open. In Zoho CRM, these two systems work together — not independently.
What Does the Role Hierarchy Automatically Control?
The role hierarchy in Zoho CRM automatically grants managers visibility into their direct reports’ records. Specifically:
- A Sales Manager role automatically sees all records owned by every Sales Rep role beneath them
- A VP of Sales sees records owned by Sales Managers and their subordinates all the way down the hierarchy
- This visibility flows upward only — a Sales Rep cannot see their manager’s personal records by default
When Do You Need Sharing Rules Instead of Relying on the Hierarchy?
You need sharing rules when you want to share records across branches of the role hierarchy rather than up and down a single branch. Common cross-branch scenarios include:
- The Support team needs read-only access to Deals so they can understand a customer’s purchase history
- The Finance team needs read access to Accounts for invoicing purposes
- A Product Specialist role needs read/write access to deals in a specific stage across all regional teams
- Two separate regional sales teams need mutual visibility into each other’s accounts for handoff situations
In each case, the role hierarchy alone won’t bridge the gap — a sharing rule does.
How Do You Audit and Maintain Data Sharing Rules in Zoho CRM?
Sharing rules that made sense six months ago may no longer reflect your current team structure. As your organization grows, roles change, teams merge, and access requirements evolve. Zoho CRM provides tools to review and manage your rules over time.
How Do You Review All Active Sharing Rules?
Navigate to Setup → Security Control → Data Sharing Settings and scroll through each module’s sharing rules section. Zoho CRM lists every active rule with its name, the “owned by” source, the “shared with” target, and the access level granted. Review this list periodically — especially after organizational changes like team restructures, new hires in leadership, or the addition of new modules.
What Are the Best Practices for Managing Sharing Rules Over Time?
- Name rules descriptively — A rule named “Pre-Sales Read-Only — Enterprise Deals from East Region” is far easier to audit than “Rule 7”
- Review rules quarterly — Schedule a quarterly review of all sharing rules alongside your role hierarchy review
- Remove obsolete rules promptly — When a team dissolves or a role changes, delete the associated rules to avoid granting unintended access
- Document your sharing model — Maintain a simple spreadsheet or internal wiki page mapping which roles and groups have access to which modules at what level
- Test after changes — After modifying a sharing rule, log in as an affected user (using Zoho CRM’s “Login As User” feature) to confirm the access behaves as expected
Conclusions: Why Does Getting Data Sharing Right in Zoho CRM Pay Off Long-Term?
Data sharing rules are one of the most impactful — and most overlooked — configuration decisions in Zoho CRM. Get them right early, and your team works with clean, appropriate access from day one. Ignore them, and you end up with either a security risk (everyone sees everything) or an operational bottleneck (reps can’t access the records they need to do their jobs).
The good news is that Zoho CRM makes this configuration genuinely manageable. The layered approach — organization-wide defaults, role hierarchy, and custom sharing rules — means you rarely need to build complex rule sets. Start with a Private default, let the role hierarchy handle vertical access, and add targeted sharing rules only where cross-team collaboration genuinely requires it. That strategy keeps your setup simple, auditable, and easy to maintain as your organization evolves.
Frequently Asked Questions
Yes — Zoho CRM supports record-level sharing directly from any individual record. Open the record, click the Share option (available under the record’s action menu or detail view), and add the specific user or group you want to share it with along with their access level. This approach works well for one-off sharing needs without modifying your broader sharing rules. However, if you find yourself sharing the same type of records repeatedly with the same users, creating a proper sharing rule is far more efficient and scalable.
Yes — sharing rules directly affect what data appears in reports and dashboards. If a user runs a report on Contacts but their sharing settings only grant access to their own contacts, the report reflects only those records. Consequently, when you grant a manager Read Only access to all Deals via a sharing rule, that manager’s deal pipeline reports automatically include those newly accessible records. This behavior makes sharing rules an important factor in report design — always consider who will run a report and what access they hold when building it.
When you change a role — rename it, move it within the hierarchy, or delete it — any sharing rules referencing that role remain in place but may produce unexpected results. Specifically, if you delete a role without updating its sharing rules first, those rules may become orphaned and stop functioning correctly. Therefore, always review and update your data sharing rules before making structural changes to your role hierarchy. Zoho CRM does not automatically update sharing rules when roles change, so this housekeeping step is entirely the administrator’s responsibility.
