Hello,
I'm currently facing a challenge at work and could use some of your expertise. We've received a request from our auditors to update our Salesforce system to enhance security and ensure compliance. Specifically, the auditors are looking for segregation of duties between user management and development/deployment. They want one admin to handle all permissions related to changing the application and another admin to manage user permissions(changing users in any way or changing/assigning permissions in any way).
I'm concerned about the feasibility of this in Salesforce and wonder if anyone here has tackled a similar challenge. Here are my specific questions:
1. Has anyone successfully implemented this level of segregation in Salesforce?
2. Are there any known challenges or limitations with Salesforce that might make this impossible or impractical?
3. Do you have any recommendations for tools or best practices to manage this effectively?
Any insights, experiences, or advice would be greatly appreciated. Thank you in advance for your help!
Certainly, enabling this permission should theoretically provide the necessary capability, but for confirmation, practical testing is advised.
