Delegate Administrative Duties

Delegated administrators can:

• Create and edit users in specified roles and all subordinate roles. User editing tasks include resetting passwords, setting quotas, creating default opportunity teams, and creating personal groups for those users.
• Unlock users.
• Assign users to specified profiles.
• Assign or remove permission sets for users in their delegated groups.
• Assign or remove permission set groups for users in their delegated groups.
• Create public groups and manage membership in specified public groups.
• Log in as a user who has granted login access to the administrator.
• Manage custom objects and customize nearly every aspect of a custom object. However, a delegated admin can’t create or modify relationships on the object or set org-wide sharing defaults.
• Administer users across all delegated groups to which the delegated admin is assigned. For example, Sam Smith is specified as a delegated administrator in two delegated groups, Group A and Group B. Sam can assign a permission set or public group from Group A to users in Group B.
• Create, edit, and delete field sets in Salesforce Classic even if the delegated admin isn’t assigned the Customize Application permission.
• Create, edit, and delete records in a custom metadata type.

Note When delegating administration, keep the following in mind. Delegated administrators:

• Can’t assign profiles or permission sets with the Modify All Data permission
• Don’t see the None Specified option when selecting a role for new users
• Need access to custom objects to access the merge fields on those objects from formulas
• Can’t modify permission sets
• Must be assigned the Manage Roles permission to change the role of portal account owners
• Can’t activate or deactivate users that have the Modify All Data permission assigned.
• Retain all privileges from their assigned user permissions, as permissions are additive and being a delegated administrator doesn’t restrict access granted elsewhere. For example, if a delegated administrator is granted the Manage Users or Customize Application permissions, that user can perform actions outside the scope that they’re allowed as a delegated administrator.

To delegate administration of particular objects, use object permissions, such as “View All Records” and “Modify All Records,” instead.