Use delegated administration to assign limited admin privileges to users in your org who aren’t administrators. For example, let’s say you want the Customer Support team manager to manage users in the Support Manager role and all subordinate roles. Create a delegated admin for this purpose so that you can focus on other administration tasks.
|Available in: both Salesforce Classic and Lightning Experience|
|Available in: Enterprise, Performance, Unlimited, Developer, and Database.com Editions|
|To manage delegated administration:||“Customize Application”|
|To be a delegated administrator:||“View Setup and Configuration”|
Delegated administrators can:
- Create and edit users in specified roles and all subordinate roles. User editing tasks include resetting passwords, setting quotas, creating default opportunity teams, and creating personal groups for those users.
- Unlock users.
- Assign users to specified profiles.
- Assign or remove permission sets for users in their delegated groups.
- Create public groups and manage membership in specified public groups.
- Log in as a user who has granted login access to the administrator.
- Manage custom objects and customize nearly every aspect of a custom object. However, a delegated admin can’t create or modify relationships on the object or set org-wide sharing defaults.
- Administer users across all delegated groups to which the delegated admin is assigned. For example, Sam Smith is specified as a delegated administrator in two delegated groups, Group A and Group B. Sam can assign a permission set or public group from Group A to users in Group B.
When delegating administration, keep the following in mind. Delegated administrators:
- Can’t assign profiles or permission sets with the “Modify All Data” permission.
- Need access to custom objects to access the merge fields on those objects from formulas.
- Can’t modify permission sets.
To delegate administration of particular objects, use object permissions, such as “View All” and “Modify All,” instead.