LET'S LEARN TOGETHER. THE BEAUTIFUL THING ABOUT LEARNING IS NOBODY CAN TAKE IT AWAY FROM YOU.

Delegate Administrator


In a big organization, a single admin can a big problem in terms of bandwidth issues. Normally admins are getting multiple requests like - creating users, updating profiles, resetting the password, running report etc. along with their daily meetings. So it will be really difficult for a single admin to handle all these requests by himself/herself. And that is the place where admins want to delegate some of their work to others (trusted colleagues). But trust me, it is a big decision. You should not give all the admin privilege to your colleagues even though he/she is a very trusted employee. Rather you should delegate few specific task to your colleagues. In Salesforce, we can do the same with DELEGATE ADMINISTRATION.

So basically Delegate Administrator will allow named users to manage other users within selected roles and profiles, as well as managed selected custom objects.

With Delegate Administration, you can configure named users to do the below things -

  • Role & Subordinate:  Delegate Administrator can create and edit users with specific roles and subordinates. The can't modify the role hierarchy though.
  • Profile:  Delegate Administrator can assign users(they create or edit) to assigned profiles. They can't modify the profile.
  • Permission Set: Delegate Administrator can add/remove selected permission sets from users(they create or edit) to assigned profiles. They can't modify the permission set.
  • Public Group: Delegate Administrator can add/remove selected public groups from users(they create or edit) to assigned profiles. They can't modify the public group.
  • Custom Object: Delegate Administrator can manage every aspect of the selected custom objects except object's permission on profiles. Delegate Admin can't create or modify relationship on the objects or set org-side sharing defaults.
  • Enable Login Access: Delegate Administrator can login in as a user belonging to the role hierarchy that they manage.
  • Unlock and Freeze User.
To make an existing user as "Delegate Administrator", you need "Customize Application" Permission and that user need "View Setup and Configuration" permission.

Note - "View Setup and Configuration" permission is always a tricky one as it will open up many  more permissions to the users. So before giving this permission to any user, you should think multiple times and justify yourself. Giving "View Setup and Configuration" permission to a user so that you can mark that user as Delegate Admin should NOT be the correct approach. I will highly recommend you to read the post - "Become More Efficient With Delegated Administrators" from AdminHero.

Use Case:
I have two users in my Org - Administrator (Sudipta Deb) and Non-Administrator(Mario Ruiz). I want to mark Mario as Delegate Administrator so that he can take care of creating/editing users with Profile - "Recruiter" or with the role - "VP, North America Sales". At the same time, I would like to make sure he can take some of the request related to custom objects - Position, Job Application, Employment Website, Job Posting.

Implementation:
  • Open Delegate Administration: Click on Setup | Administer | Security Controls | Delegate Administration.
  • Click on New
  • Put the below details as shown in the picture -
  • In the next page, under "User Administration", select the role - "VP, North America Sales" like shown below - 
  • In the next page, under "Assignable Profiles", select the profile- "Recruiter" like shown below 
     
  • In the next page, under "Custom Object Administration", select the objects - "Position, Job Application, Employment Website, Job Posting" like shown below - 
  • Add the user "Mario Ruiz" under "Delegated Administrator
  • Finally, it will look like - 

There are few limitations as well with Delegate Administrator which are -
  • Can't assign profiles or permission sets with "Modify All Data" permission.
  • The -None- option will not be available when selecting roles for new users.
  • For formula fields, accessing merge fields from another object requires delegate admin's permission on that object.
  • Can't modify permission sets.
  • Standard Objects are excluded from Delegated Administration. We have a Salesforce Idea open for this - https://success.salesforce.com/ideaView?id=08730000000BptIAAS
  • Another Salesforce Idea worth mentioning here is - Allowing Non-Admin users to import custom objects - https://success.salesforce.com/ideaView?id=08730000000Bre6
  • For security, profiles with the “Modify All Data” permission cannot be included under "Assignable Profiles". See the error when attempting to include the System Administrator profile. 
  • Delegate Admin can change the FLS for existing and newly created fields for those objects which are assigned to him/her. But Delegate Admin can't change the Object Level Permission on Profile.
Are you using Delegate Administrator in your org? What use case you are handling using Delegate Administrator? What problem(if any) you faced? Please share your feedback. 
Share:

33 comments:

  1. Nice information about delegate administrator My sincere thanks for sharing this post Please Continue to share this post
    Salesforce Training in Chennai

    ReplyDelete
  2. Excellent post!!! In this competitive market, customer relationship management plays a significant role in determining a business success. That too, cloud based CRM product offer more flexibility to business owners to main strong relationship with the consumers. Salesforce Training Institutes in Chennai| Salesforce Training Institutes in Chennai

    ReplyDelete
  3. Great post. wonderful information and really very much useful. Thanks for sharing and keep updating.
    Best VMware Training Institute in Chennai | Best VMware Training Institute in Velachery

    ReplyDelete
  4. Wonderful .. I will bookmark your web site and take the feeds additionally…I am happy to find numerous helpful information right here within the put up, we want work out extra strategies in this regard, thank you for sharing.
    Excellent Photoshop Training Institute in Chennai | Best Multimedia Training Institute in Velachery

    ReplyDelete
  5. Your blog is awesome..You have clearly explained about it ...Its very useful for me to know about new things..Keep on blogging…
    Best Computer courses Training institute in Chennai

    ReplyDelete
  6. The best thing is that your blog really informative thanks for your great information!
    Best Data mining project center in kanchipuram

    ReplyDelete
  7. You have done a great job, really the concept of big data was superb, its

    very interesting and easy to understand also.. Keep updating such a nice

    blog..
    Best MATLAB Training institute in Chennai








    ReplyDelete

  8. Thanks for this greatful information. all this information is very important to all the users and can be used good at all this process.please keep on updating.. Best RHCE Training Institute in Kanchipuram|

    ReplyDelete
  9. Very impressive and informative blog.. thanks for sharing your valuable

    information.. it is very useful and easy to learn as well... keep rocking

    and updating... looking further..
    Best

    CCNP Training institute in kanchipuram

    ReplyDelete
  10. very nice blogs!!! I have to learning for lot of information for this

    sites...Sharing for wonderful information. Thanks for sharing this

    valuable information to our vision. You have posted a trust worthy blog

    keep sharing.
    Best

    Advanced JAVA cource in kanchipuram









    ReplyDelete
  11. very nice blogs!!! I have to learning for lot of information for this sites...Sharing for wonderful information. Thanks for sharing this valuable information to our vision. You have posted a trust worthy blog keep sharing.
    Best Advanced Ethical Hacking cource in kanchipuram








    ReplyDelete
  12. I wondered upon your blog and wanted to say that I have really enjoyed reading your blog posts. Any way I’ll be subscribing to your feed and I hope you post again soon… Best PCB Course in Kanchipuram|

    ReplyDelete
  13. Very interesting blog which helps me to get the in depth knowledge about the technology, Thanks for sharing such a nice blog...
    Best Android Training Institute in chennai








    ReplyDelete
  14. your way of expressing views and ideas are really awesome. thus it is exclusive and very much interesting. i like your encryption and thanks a lot. Best Adobe Illustrator Training In Kanchipuram|

    ReplyDelete
  15. very nice blogs!!! I have to learning for lot of information for this sites...Sharing for wonderful information. Thanks for sharing this valuable information to our vision. You have posted a trust worthy blog keep sharing.
    Best Tally institute in chennai

    ReplyDelete
  16. Your Blog is really amazing with useful information.keep updating.. Bes PCB Training Course In Kanchipuram|

    ReplyDelete
  17. very nice blogs!!! i have to learning for lot of information for this sites...Sharing for wonderful information. Thanks for sharing this valuable information to our vision. You have posted a trust worthy blog keep sharing
    Best ios Training institute in chennai

    ReplyDelete
  18. Nice blog. Simple content easily understandable for freshers. Thanks for sharing and keep updating.
    Best Adobe Aftereffects Training Academy in Chennai

    ReplyDelete
  19. I really appreciate this wonderful post that you have provided for us. I assure this would be beneficial for most of the people Best Tally Training Course In Kanchipuram|

    ReplyDelete
  20. Thanks for sharing your great information..Its really impressive and informative content..
    No.1 PCB Design Training Institute in Chennai

    ReplyDelete
  21. Well Said, you have furnished the right information that will be useful to anyone at all time. Thanks for sharing your Ideas. Best Python Training Institute In Kanchipuram|

    ReplyDelete
  22. Admiring and respecting the Uniqueness of your informative and Creative content. Anticipating for your future posts. Keep up the Good work.

    Microsoft Azure Training Institute in Chennai | Microsoft Azure Training Institute in Madipakkam


    ReplyDelete

  23. It's interesting that many of the bloggers to helped clarify a few things for me as well as giving.Most of ideas can be nice content.The people to give them a good shake to get your point and across the command. Best MS Office Training Institute In Kanchipuram|

    ReplyDelete
  24. this is really too useful information and very good readability content you were shared keep doing more useful information. Best SQL Training Institute In Kanchipuram|

    ReplyDelete
  25. Thanks for making me this Blog. You have done a great job by sharing this content here.
    Keep writing blog this like.

    Best RPA cource in kanchipuram

    ReplyDelete
  26. Very interesting topic. Helps to gain knowledge and lot of information. Thanks for posting information in this blog.
    Adobe indesign Training in Chennai | Adobe Indesign Training in Velachery

    ReplyDelete
  27. Very interesting topic. Helps to gain knowledge about lot of information. Thanks for posting information in this blog.
    Tally Training Institute in Chennai | Tally Training Institute in Madipakkam

    ReplyDelete
  28. Great blog… I love to read your information because your writing style is too good, its is very very helpful for all of us. Best Advanced Cloud Computing Course In Kanchipuram|

    ReplyDelete
  29. Thanks for another great post. The place else may anyone get that type of information in such a perfect way of writing? I’ve a presentation next week, and I’m at the look for such information.
    No.1 Microsoft Azure Training Institute in Kanchipuram

    ReplyDelete
  30. Awesome post. Really you are shared very informative concept... Thank you for sharing. Keep on updating...
    VMware Training Institute in Chennai | VMware Training institute in Tambaram

    ReplyDelete
  31. Nice post.The information you have deliver here is really useful to make my knowledge good. Best Adobe Photoshop Course In Kanchipuram|

    ReplyDelete

Follow Me

Enter your email address:

Delivered by FeedBurner

Popular Posts

Labels

Salesforce (105) Apex (46) admin (27) visualforce (21) ADM (20) dev 501 (19) integration (18) learn salesforce (18) 501 (16) SOAP (13) lightning (13) tutorial (11) Certification. (10) javascript (10) Kitchener Developer Group (8) Certification (7) Trigger (7) test class (7) unit testing (7) Advanced Admin (6) Sharing and Visibility (6) design pattern (6) developer (6) report (6) salesforce release (6) security (6) service cloud (6) trailhead (6) Advanced Apex (5) New Features (5) SOQL (5) css (5) dashboard (5) debug (5) formula (5) mobile (5) solution management (5) use case (5) JSON (4) Kitchener User Group (4) Lightning Experience (4) Sales Cloud (4) Salesforce DX (4) Tips (4) WebSphere (4) best practice (4) cast iron (4) component (4) deployment (4) event (4) github (4) html (4) polymer (4) profiles (4) responsive (4) tdd (4) ui (4) Architect (3) Lightning Web Component (3) Live Chat (3) Online Event (3) Opportunity (3) Performance (3) Products (3) REST (3) Role (3) Salesforce Certification (3) Scratch Org (3) Study Notes. (3) Summer15 (3) Web Technology (3) automation tool (3) dynamic apex (3) license (3) map (3) mapbox (3) singleton (3) version controlling (3) Asynchronous callout (2) Bulkify (2) Community (2) Data Architecture and Management Certification (2) Devops (2) Distributed Version Controlling (2) ES6 (2) Eclipse (2) Einstein (2) Enterprise Territory Management (2) Financial Services Cloud (2) Force.com IDE (2) Governor Limit (2) Groups (2) IBM (2) Implicit Sharing (2) JourneyToCTA (2) Lightning Design System (2) Live Agent (2) Metadata (2) PD II (2) Price Book (2) SOSL (2) Sharing (2) Spring 15 (2) Summer17 (2) Territory (2) Virtual Event (2) ant (2) basic (2) chatter (2) coding (2) communication (2) console (2) controller (2) documentation (2) dreamforce (2) flow (2) git (2) jquery (2) logging (2) object (2) permission (2) process builder (2) release (2) salesforce1 (2) strategy (2) xml (2) Action Plan (1) Action Plan Template (1) Activity Timeline (1) Advanced Currency (1) Agent Productivity (1) Analytics (1) Apex Sharing (1) AppExchange (1) Arrow (1) Article (1) Asynchronous Apex (1) Aura Framework (1) Batch (1) Bots (1) Browser (1) Bulk data load (1) CTA (1) Calendar (1) Canon (1) Case Management (1) Celebration (1) Cheat Sheet (1) Classic (1) Compare (1) Confetti (1) Constructor (1) Contact Center (1) Continuation (1) Continuous Integration (1) Convert (1) Cookie (1) CumulusCI (1) Custom Metadata (1) Custom Object (1) Customer (1) Dated Exchange Rate (1) Decorator Design Pattern (1) Dev Hub (1) Development (1) Diwali (1) EDA (1) Education Cloud (1) Email (1) FSC (1) Function (1) Future (1) Global Gathering (1) Goals (1) Guest Access (1) Guest Profile (1) Guest User Sharing Rule (1) Guide (1) HEDA (1) Higher Education (1) Household (1) Ideas (1) Improvement (1) KPIs (1) Knowledge Management (1) Large Data Volume (1) LastModifiedDate (1) Lightning Feature (1) Manage Currencies (1) Manual Sharing (1) Metrics (1) Multi Currency (1) New (1) New Feature (1) OOPS (1) OWD (1) Omni-Channel (1) Partner (1) Person Account (1) Photo (1) Pipeline (1) Platform Developer I (1) Platform Developer II (1) Presentation (1) Product Schedule (1) Profile (1) Promise (1) Prototype (1) Public Site (1) Query Plan (1) Queueable (1) QuickReference (1) Related records (1) Reports (1) Retrieve (1) Role Hierarchy (1) SAL (1) SFDX (1) Salesforce Advisor Link (1) Salesforce Labs (1) Salesforce Optimizer (1) SalesforceDx (1) Schedule (1) Session (1) Sharing Rule (1) Sharing Sets (1) Site (1) Skills (1) Snap-ins (1) Spring 17 (1) Spring 20 (1) Summer14 (1) Summer16 (1) Summer19 (1) Switch (1) SystemModStamp (1) Timeline (1) Unauthorized Access (1) User License (1) Users (1) Webservice (1) Winter'15 (1) Winter'17 (1) access (1) actionFunction (1) actionPoller (1) actionRegion (1) actionSupport (1) agile (1) app (1) approval process (1) aura (1) awesome (1) backup (1) bitbucket (1) book (1) campaign (1) change set (1) code (1) code coverage (1) configuration (1) csv (1) custom button (1) custom settings (1) customization (1) data loader (1) database (1) delegate Admin (1) describe (1) dom (1) duplicate (1) dynamic (1) equals (1) error (1) field-level security (1) folder (1) ftp (1) generic (1) gift (1) global describe (1) hashcode (1) import wizard (1) jenkins (1) keynote (1) long running requests (1) monitoring (1) mysql (1) page layout (1) personal (1) power of one (1) record type (1) relationship (1) request (1) review (1) sub-tab (1) tab (1) username (1) visual workflow (1) workflow (1)

Total Subscribers

Total Pageviews

Contact Me

Name

Email *

Message *