Data Sharing Rules in Zoho Desk allow administrators to define granular view and access permissions for modules such as Tickets, Accounts, and Contacts across your organization's users. By configuring these rules thoughtfully, you establish a security foundation that respects user roles and profiles while enabling appropriate collaboration.
Why this matters
As your support team grows, you need to control who can see and interact with which records. Without data sharing rules, sensitive customer information may be exposed to agents who shouldn't access it, or conversely, agents may lack visibility into tickets they need to resolve. Setting up these rules early—ideally before onboarding your full team—adds a critical security layer on top of your organization-wide default permissions [2]. This is especially important if you manage multiple departments, regions, or support tiers with different access needs.
Step-by-step
Step 1. Establish organization-wide default permissions
Before creating individual data sharing rules, define baseline access rights for each module (Tickets, Accounts, Contacts, etc.). By default, records are typically restricted so that only the owner and their manager can view them [2]. Decide whether this private model suits your organization or if you need a more open starting point. Document these defaults so your team understands the foundation upon which specific rules will layer.
Step 2. Navigate to the Data Sharing configuration area
Log in to Zoho Desk as an administrator. Access the Data Sharing Rules section from your admin settings [1]. This is where you'll define which user roles and profiles can access which modules and records.
Step 3. Create a data sharing rule
Define a new rule by specifying:
- The module (e.g., Tickets, Accounts, Contacts) to which the rule applies
- The user profile or role that will receive access
- The access level (view-only, edit, or other permissions as your organization requires)
Repeat this process for each combination of module and user group that needs different permissions [1]. For example, you might allow all agents to view Accounts but restrict Ticket editing to senior support staff only.
Step 4. Align rules with your role and profile structure
Ensure your data sharing rules work in concert with the roles and profiles you've already created [2]. When you onboard new agents, assign them a role and profile that already has corresponding data sharing rules in place. This prevents gaps where users lack necessary access or have unintended permissions.
Step 5. Test and refine
After configuring your rules, have a test user from each role attempt to access records they should and should not see. Verify that the permissions work as intended before rolling out to your full team. Adjust rules as needed based on real-world usage patterns.
Common pitfalls
- Forgetting to set organization-wide defaults first: If you skip this step, your individual rules may conflict or leave gaps. Always establish baseline permissions before layering specific rules.
- Over-complicating the rule structure: Creating too many overlapping rules can lead to confusion and unintended access. Keep your rule set as simple as possible while meeting security requirements.
- Not revisiting rules during team changes: As your organization evolves—new departments, role restructuring, or staff turnover—your data sharing rules may become outdated. Review them periodically to ensure they still reflect your current structure.
What to check
- Verify that each user role has the minimum necessary permissions to perform their job, with no unnecessary access to sensitive records.
- Confirm that new team members assigned to a role automatically inherit the correct data sharing permissions without manual intervention.
- Test edge cases: ensure that managers can see their team's records, that cross-functional collaboration works where intended, and that restricted data remains hidden from unauthorized users.
---
*This article is provided by Beam Help — independent expert support for Zoho. We are not official Zoho support; for official guidance, consult Zoho's support portal.*