You we can use sharing rules to grant wider access to data. we cannot restrict access below our organization wide default levels. To create sharing rules, your organization-wide defaults must be Public Read Only or Private.