Control Authorization with Custom Profiles and Roles

In identity and access management, it's important to control who is authorized to access resources. You can manage authorization by assigning your users profiles and roles. Profiles define how users access data and what they can do in Salesforce. Roles allow you to create a user hierarchy so that users can access data owned or shared by subordinates.

1. From Setup, in the Quick Find box, enter Profiles, then select Profiles.
2. Next to External Identity User, click Clone.
3. Enter a name for the profile and save.
4. To customize the profile, click Edit. You can modify the permissions associated with the profile.
   1. Click Edit.
   2. Search for API Enabled, and then select the checkbox next to this permission.
      API Enabled gives users API access to your org’s data through any back-end mechanism.
   3. Click Save.
5. Create a role structure.
   Sites require a user role hierarchy to help control how users share Salesforce data. Assign a role to the user who manages your site.
   1. From Setup, enter Role in the Quick Find box, then select Roles.
   2. From the dropdown list, select Product-based Sample, then select Set Up Roles.
   3. Under CEO, click Add Role.
   4. For the role label, enter Customer Manager.
   5. Click Save.
6. Add the Customer Manager role to the user site manager so that the manager can modify the Customer profile.
   

   Note The person who manages the site for your company must have a role. However, you can’t assign roles to users who have the External Identity license, which enables access to the Salesforce Customer Identity product.
   1. From Setup, enter Users in the Quick Find box, then select Users.
   2. Next to your username, click Edit.
   3. Under Role, select Customer Manager.
   4. Click Save.