Skip to main content
Is there a way to further restrict a delegated admin's access?  For example, still allowing them to log in as a user but removing thier ability to do things such as change a users profile, unfreeze a user, or updated a list view.  Also, once they're logged in as a user restrict thier ability to do anything as that user?
1 respuesta
  1. 7 may 2019, 0:11
    Hi Garrett,

     

    You might be able to accomplish this, but test to make sure it is working as expected for your delegated admin profile. Go ahead and make the following System Permission changes to what I am assuming is a "custom delegated admin" Profile, and not the standard System Administrator profile as you cannot make such changes in a standard profile like the System Administrator one.

    • Restrict User Profile Changes = Manage Profiles and Permission Sets and/or a few more settings under the User section in System Permissions, as needed.
    • Unfreeze Users = uncheck Manage Users and/or a few more settings under the User section in System Permissions, as needed.
    • Update List Views = uncheck Create and Customize List Views and/or Manage Public List Views.

    Making these System Permission changes on the "custom delegated admin" Profile should still allow the "delegate admin" to log in as other users given the Modify All Data system permission is checked per this help doc (

    https://help.salesforce.com/articleView?id=logging_in_as_another_user.htm&type=5), but not sure if you can avoid the restriction to make that "delegated admin" make data changes as that user. Give it a try and test it out. Also check the Login Access Policies Setup menu item. Good luck!
0/9000