You are here:
Delegated Access Management
With delegated access management, you can assign proxies and delegate scoped, time-bound access to your information. You decide who acts on your behalf, what access you delegate, and when that access starts and ends.
| Available in: Lightning Experience |
| Available in: Enterprise, Performance, Unlimited, and Developer Editions with Education Cloud |
This framework supports these delegation methods:
- Self-Service
- An Experience Cloud user adds their own proxy and delegates access directly.
- Staff-Assisted
- An Education Cloud user sets up the delegation on behalf of another user.
Core Principles of Delegated Access
These core principles govern delegated access:
- User-Driven
- The information owner decides who can access their information.
- Time-Bound
- Access has defined start and end dates and expires automatically.
- External-Ready
- Proxies can be external users, including users who self-register through an Experience Cloud portal.
- Inherited Least Privilege
- A proxy can access only what the delegating user can access.
- Delegated Access Management in Education
A self-service authorization model helps your institution meet privacy requirements and gives trusted individuals access to student data. Students grant proxies, such as parents, guardians, or other trusted individuals, access to their institutional records. - Set Up Your Org for Delegated Access
Set up Delegated Access Management, assign permissions, configure student-proxy relationships and record sharing, and add the My Proxies component to case and contact record pages. - Manage Delegated Access
Data privacy regulations such as FERPA and GDPR require strict access delegation. Students need control over who accesses their data and the ability to revoke access at any time. Your institution also needs audit trails to support compliance. Manage delegated access efficiently, support compliance, build trust, and improve the experience for families. - Staff Assisted Proxy Management and Access Delegation
Student advisors can grant parents, guardians, and other proxies access to selected student information for a specified time period. Select the delegated access definitions that determine which categories of information the proxy can access. - Delegated Access Statuses
Delegated access request statuses show where a request is in the access lifecycle and whether an action is required. Use the statuses to track proxy registration, scheduled access, granting, revocation, expiration, retries, and terminal failures.
Did this article solve your issue?
Let us know so we can improve!
