To better protect your Salesforce org’s data, you can restrict who can view record names in lookup fields and system fields, such as Created By and Last Modified By. If you enable the Require permission to view record names in lookup fields setting, users need Read access to these records or the View All Lookup Record Names permission to view this data. Previously, this behavior was set to be enforced in a release update, but instead the functionality is now an opt-in setting so you can enable it when it best suits your org.
Where: This change applies to Lightning Experience and Salesforce Classic in all editions.
Why: Admins have more control over what users see in records. If the Require permission to view record names in lookup fields setting isn’t enabled, users can view record names in lookup fields without Read access to those records.
After the Require permission to view record names in lookup fields setting is enabled, in Lightning Experience, users who don’t have Read access or the View All Lookup Record Names permission see the lookup field labels, but not the data in the fields.
In Salesforce Classic, users who don’t have Read access or the View All Lookup Record Names permission see an underscore in system user lookup fields. They also see the record ID in custom user lookup and non-user lookup fields.
How: To enable this setting, from Setup, in the Quick Find box, enter Sharing Settings, and then select Sharing Settings. Click Edit in the Organization-Wide Defaults area, then select Require permission to view record names in lookup fields.
Admins can enable the View All Lookup Record Name permission in custom profiles or permission sets. Only enable this permission for users who must see record names in all lookup and system fields, regardless of sharing settings. This permission only applies to lookup record names in list views and record detail pages.