What permission is needed for users to change sharing using Apex sharing reasons?

To change sharing using Apex sharing reasons, users need "Modify All Data" permission. This permission grants users the ability to change data shared settings across all records, which is essential when using Apex for sharing. Apex sharing reasons allow developers to implement dynamic sharing models and specify the rationale for record sharing at runtime.

Without "Modify All Data," users would be restricted from altering sharing settings even if they have access to the records themselves. This permission is critical particularly in the context of Apex, where precise control over sharing is necessary to enforce security models and ensure that only appropriate users have access to sensitive data.

Other permissions, such as "Read Access" and "Edit Access," do not allow for changing sharing settings; they focus instead on data visibility and editing capabilities respectively. "View All Data" allows users to view all records without restriction, but it still does not confer the necessary authority to adjust sharing configurations. Thus, "Modify All Data" is the only permission that enables users to change sharing through Apex effectively.