User Profile permission descriptions

How to manage User Profiles and Permission Sets

Please note: Any link that is not working, right-click the link and select "Open link in a new tab".  If the link is still invalid, let us know in feedback.

Permissions control who sees what in your Salesforce Organization. 

• Enterprise and Performance Edition  - Allow the use of a Custom Profile or Permission Set.
• Contract Manager, Group, and Professional Editions -  Have Standard Profiles that cannot be customized by default, but permissions can be added. Note: If you use Professional Edition, you can now create up to 10 permission set groups in your Salesforce org. The ability to use permission set groups also means that Professional Edition Salesforce orgs can adopt packages that use permission set groups. The limit for installed managed permission sets from AppExchange packages is 1,000, It’s the same for all editions that allow permission set groups. Previously, permission set groups weren’t available in Professional Edition.

Article Contents

• Admin Permissions
• Security Admin Permissions
• User Management Permissions
• Data Permissions
• Import and Export Permissions
• Report and Dashboard Permissions
• Developer Permissions
• Chatter and Communities Permissions
• User Interface Permissions
• Object Permissions

Admin Permissions

• Maintain Your Users' Opportunity Teams  - Allows the user to mass transfer team members.
• Create and Upload Change Sets -  Allows the user to create, edit, and upload outbound Change Sets.
• Customize Application - Allows the user to customize the Salesforce Organization using the App Setup menu.
• Deploy Change Sets -  Allows the user to deploy inbound Change Sets.
• Download AppExchange Packages - Allows the user to install managed AppExchange apps.
• Manage Billing - Allows the user to access Checkout and purchase additional licenses and features.
• Manage Business Hours Holidays - Allows the user to edit business hours and holidays.
• Manage Cases - Allows the user to administer case settings, to include Email-to-Case and mass transfer of cases.
• Manage Connected Apps -  Allows the user to manage, create, and delete OAuth applications.
• Manage Content Permission - Allows the user to configure library content in Salesforce.
• Manage Email Client Configurations - Allows the user to create, edit, and delete Outlook configurations for Salesforce for Outlook.
• Manage Mobile Configurations - Allows the user access to Salesforce Mobile features.
• Manage Package Licenses - Allows the user to manage package licenses.
• Manage Record Types and Layouts for Files - Allows users to administer content in non-Chatter enabled Salesforce Organizations (in Chatter-enabled Salesforce Organizations use the "Customize Application" permission).
• Manage Sharing - Allows the user to manage sharing configurations, including Salesforce Organization-wide defaults.
• Manage Territories  - Allows the user to make changes in the territories settings in the Setup menu.
• Manage Users -  Allows the user to create, edit, and deactivate users and manage security settings to include profiles and roles.
• Transfer Record - Allows the user to change the owner of most records.

Security Admin Permissions

• IP Restrict Requests -  Allows the portal user to only login from a limit of 5 IPs' addresses.
• Is Single Sign-On Enabled -  Allows a user to sign on using delegated username and password authentication to a corporate database instead of the Salesforce user database.
• Manage Auth. Providers -  Allows the user to create and edit Auth. Providers.
• Manage IP Address -  Allows the user to input IP addresses in Network Access settings and IP Restrictions on the profile inside of Salesforce.
• Manage IP Addresses -  Allows the user to create, edit, and delete trusted IP ranges.
• Manage Login Access Policies -  Allows the user to specify the login access policies that apply to Administrators and Support Organizations.
• Manage Password Polices -  Allows the user to set password restrictions and lockout policies for users.
• Manage Multi-Factor Authentication -  Allows the user to manage the time-based token secret for Multi-Factor Authentication.
• Multi-Factor Authentication for API Logins -  Allows the user to create a time-based token using a mobile phone to scan a QR code generated instead of the emailed security token in the API login attempt.
• Multi-Factor Authentication for User Interface Logins -  Allows the user to create a time-based token using the mobile phone to scan a QR code generated during login.

User Management Permissions

• Assign Permission Sets -  Allows the user to assign Permission Sets to users.
• Manage External Users -  Allows the user to manage Partner Portal users.
• Manage Profiles and Permission Sets -  Allows the user to create, edit, and delete profiles and Permission Sets.
• Manage Roles -  Allows the user to create, edit, and delete roles.
• Password Never Expires -  Allows the user to have a password that does not expire. This permission is good for any user that is only used for API integrations.
• Reset User Passwords and Unlock Users -  Allows the user to reset user passwords and unlock users.
• Use Identity Features -  Allows the user to access Salesforce Identity features such as App Launcher.
• View All Users -  Allows the user to view all user objects regardless of Sharing Settings configuration.

Data Permissions

• Modify All Data -  Allows the user to make changes to all data within the Salesforce Organization.
• View All Data -  Allows the user to view all the data in the Salesforce Organization. 

Import and Export Permissions

• Export Reports -  Allows the user to use Export Details and Printable View to export reports.
• Import Leads -  Allows the user to import leads through the Import Wizard.
• Import Solutions -  Allows the user to import Solutions using the Import Wizard.
• Manage Knowledge Article Import/Export -  Allows the user to import/export Articles.
• Weekly Data Export -  Allows the user to run the weekly Data Export Service.

Report and Dashboard Permissions

• Create and Customize Reports - Allows the user to create, edit, and delete reports.
• Create Report Folders - Allows the user to create, edit, and delete report folders.
• Drag-and-Drop Dashboard Builder - Allows the user to create, edit, and delete dashboards through the drag-and-drop interface.
• Edit My Dashboards -  Allows the user to edit, move, save, and delete user's own dashboards.
• Edit My Reports -  Allows user to edit, move, save, and delete user's own reports.
• Manage All Private Reports and Dashboards -  Delete Reports and Dashboards from personal or private folders.
• Manage Analytic Snapshots -  Allows the user to create, edit, and delete Analytic Snapshots.
• Manage Custom Report Types - Allows the user to create, edit, and delete custom report types.
• Manage Dynamic Dashboards - Allows the user to create, edit, and delete dynamic dashboards.
• Manage Reporting Snapshots -  Allows the user to create, edit, and delete reporting snapshots.
• Report Builder - Allows the user to create, edit, and delete reports using the Report Builder interface.
• Run Reports - Allows the user to view the reports tab, run reports, view dashboards based on reports.
• Schedule Dashboards - Allows the user to schedule when dashboards refresh, and send email notifications that include refreshed dashboards in HTML format.
• Schedule Reports - Allows the user to run reports in the background, and export results as a CSV or Excel file on completion.
• View My Team's Dashboards - Allows the user to view dashboards owned by people under them in the Role Hierarchy.
• View Reports in Public Folders - Allows the user to view and access reports in public folders.

Developer Permissions

• ​​API Enabled -  Allows the user execute API calls.
• Api Only User -  Allows the user to  access Salesforce through API only instead of the user interface.
• Author Apex - Allows the user to create and EDIT Apex classes and Triggers.
• Bulk API Hard Delete -  Allows the user to delete records in the Bulk API without storing them in the Recycle Bin (soft delete).
• Insert System Field Values for Chatter Feeds -  Allows the user to set the CreatedById or CreatedDate for chatter post or comment from API when creating the record.
• Monitor Bulk Data Load Jobs -  Allows the user to monitor or abort Bulk API jobs.
• Manage Flow -  Allows the user to use Flows.
• Run Flows -  Allows the user to run Flows in Salesforce.
• Send Outbound Messages -  Allows the user to send outbound messages to an external Web Service API.

Chatter and Communities Permissions

• Create and Manage Communities -  Allows the user to create and manage Communities, add Community members, and customize the appearance.
• Create and Own New Chatter Groups -  Allows the user to create and own new Chatter groups.
• Create and Share Links to Chatter Files -  Allows the user to Share a Chatter file with anyone by creating a file link and sending it via email or IM.
• Invite Customers To Chatter -  Allows the user to invite customers (non-Salesforce users) to Chatter.
• Manage Chatter Messages -  Allows the user to access all users' messages sent in Chatter through a SOAP API.
• Manage Unlisted Groups -  Allows the user to view and moderate unlisted Chatter Groups.
• Moderate Chatter -  Allows the user to deactivate Chatter Free users, assign moderator privileges to Chatter Free users, and remove posts.
• Moderate Communities Feeds -  Allows the user to moderate Chatter Feeds in Communities.
• Moderate Communities Files -  Allows the user to moderate Chatter Files in Communities. 

User Interface Permissions

• Hide Option to Switch to Salesforce Classic -  Assign to users to remove the switcher to Salesforce Classic option.
• Knowledge One -  Allows the user to view the Knowledge tab instead of the Articles tab.
• Lightning Experience User -  Allows a user to access the Lightning Interface.
• Remain in Salesforce Classic -  Allows the users who want to remain on Classic Interface.
• Show Custom Sidebar On All Pages -  Allows the user to display a custom sidebar on all pages in Salesforce.
• View Global Header -  Allows the user view the global header to switch between apps and access personal setup and customization options.
• View Setup and Configuration  - Allows the user to view the App Setup menu and Administrative Settings pages. (removed this because the link was broken and this ability is addressed in the User capabilities with 'Customize Application' Profile Permission link.)

Object Permissions

• Activate Contracts - Allows the user to change Contract status to Activated.
• Approve Contracts - Allows the user to apply an approved status to a Contract.
• Assign Topics - Allows the user to assign existing topics to feed items and remove topics from feed items.
• Convert Leads - Allows the user to convert Leads need "Create" and "Edit" on Leads, Contacts, and Opportunities with "Read" permission on any related Campaigns.
• Create and Customize List Views - Allows the user to create list views; modify and delete own list views.
• Create Libraries - Allows the user to create Salesforce CRM Content libraries.
• Create Topics - Allows the user to add new Topics to a record.
• Delete Activated Contracts - Allows the user to delete an activated Contract.
• Delete Topics - Allows the user to add or delete Topics on a record.
• Deliver Uploaded Files and Personal Content - Allows the user to create content deliveries from a shared library in Salesforce CRM content.
• Edit Case Comments - Allows the user to edit their own case, but not other user's comments.
• Edit Events - Allows the user to create, edit, and delete events.
• Edit HTML Templates - Allows the user to create, edit, and delete HTML email templates.
• Edit Opportunity Product Sales Price - Allows the user to edit the sales price on Opportunity line items.
• Edit Read Only Fields - Allows the user to edit fields that are configured as read only fields due to Page Layouts or Field-level Security.
• Edit Topics - Allows the user to edit Topic names and descriptions.
• Hide the Seen By List - Removes the Seen by List from the users' view.
• Manage Articles -  Allows the user to create article types and article actions.
• Manage Call Centers -  Allows the user to import, view, edit, or delete Call Centers in CRM.
• Manage Categories -  Allows the user to create or change solutions in the CRM.
• Manage Content Properties -  Allows the user to create, edit, and delete custom fields in Salesforce CRM content.
• Manage Data Categories -  Allows the user to create, edit, and delete Data Categories.
• Manage Leads -  Allows the user to change the status of multiple Leads in a list view.
• Manage Letterheads -  Allows the user to create, edit, and delete letterheads layouts for HTML emails.
• Manage Public Classic Email Templates -  Allows the user to create, edit, and delete text emails, mail merge templates, and folders for public email templates.
• Manage Public Documents -  Allows the user to create, edit, and delete folders for public documents.
• Manage Public Lightning Email Templates -  Allows the user to create, edit, and delete text emails, mail merge templates and folders for public email templates.
• Manage Public List Views -  Allows the user to create, edit, and delete public list views.
• Manage Published Solutions -  Allows the user to create, edit, and delete Solutions that are accessible to the public on your Self-Service portal or Web site.
• Manage Salesforce CRM Content -  Allows the user to make changes in the CRM content.
• Manage Salesforce Knowledge -  Allows the user to create article types.
• Mass Edits from Lists -  Allows the user to mass edit records from the list view.
• Mass Email -  Allows the user to mass email Contacts and Leads.
• Send Email -  Allows the user to send email to a single Contact or Lead.
• Tag Manager -  Allows the user to rename or delete Public Tags.
• Transfer Cases -  Allows the user to change the case owner field on the Case object.
• Transfer Leads -  Allows the user to change the Lead owner field on the Lead object.
• View Data Categories -  Allows the user to view the Data Categories page.
• View Encrypted Data -  Allows the user to view the value of encrypted fields in plain text.
• View Help Link -  Allows the user to view help link.