Monitor Login History and Freeze Users: New Profile Permissions FAQ (Summer '24)

Are These Entirely New Profile Permissions?

Yes. The two new permissions — Monitor Login History and Freeze Users — are brand new permissions added to Salesforce. They appear under the Users section for both profiles and permission sets starting with the Summer '24 release.

Why Were These Permissions Added to Salesforce?

Previously, the Manage Users permission was required to freeze users and view login history. However, Manage Users grants significantly more access than most delegated administrators need. These new permissions were introduced in response to customer feedback, allowing organizations to follow the principle of least privilege. The specific customer ideas that drove this change are referenced in the Additional Resources section.

How Will the Permissions Be Added to Existing Profiles and Permission Sets?

No action is required from customers. The new permissions will be automatically enabled for any existing customer profile or permission set that currently has the Manage Users permission enabled. The transition happens automatically as part of the Summer '24 release deployment.

Does Enabling "Manage Users" Also Automatically Enable "Monitor Login History" and "Freeze Users"?

Yes. When Manage Users is enabled for a profile or permission set, the two new permissions are also automatically enabled. However, if you later deselect Manage Users, the new individual permissions are not automatically revoked — administrators must manually deselect Monitor Login History and Freeze Users separately, consistent with how other permissions that are inherently linked to Manage Users behave.

When Will These Permissions Be Available for My Org?

The new permissions become available automatically after your organization receives the Summer '24 major release. Use the Salesforce Trust site to determine when your organization is scheduled to receive the release (see Additional Resources).

Which Users Can Be Assigned These Permissions?

These permissions can be assigned to users with a full Salesforce license. If a user's license type (such as Platform User) does not support the permission, attempting to assign it results in the following error:

Can't assign permission set [PermissionSetName] to user [Platform User]. The user license doesn't allow the permission: Monitor Login History and/or Freeze Users.