Delegated administration delegated administration as the name says it is basically delegating the administrative
privileges limited administrative privileges to non AG ministry.
Does so then we say that we are delegating the administrative privileges to not administrators that
it would be a question in our mind.
Why would we do that.
Then would we do that right.
So in any sense falls out of the vet will be a team off for a technical sensible people.
Right.
Business analyst the developers the admins so those technical people that they work on Nissan's full
sort of the customizing the sales floors are taking care of the admin task and everything.
However in large organizations when there are a large number of users in those scenarios we might need
this concept of delegated administration otherwise like the sales support the technical sales full steam
they would be there will be overflowing of cases from every single user for every minor task.
Maybe unlocking a user assigning give us a specific permission to actually use it so in those scenarios
what we do is we ve assign some limited administrative privileges to non AG ministry.
That's basically mostly to be business users like for example we may give some administrative privileges
to the sands manager so he can take it off his sales team or build support managers so he can take it
off a support team.
Like that so then we say about that there's a limited administrative privileges it's a work on administrative
privileges are delegated administrator get.
Does he get all privileges that the administrator has Salesforce administrator has.
Definitely not.
He does not get all the privileges.
He only gets limited privileges.
So one of the privileges that he gets the delegated administrator can create and introduce us in some
specific rules and subordinate rules.
So only specific rules that are assigned to him.
So whenever we created the delegated administration group and the assigned users we also specify which
are all the rules that they can work with.
So they'll be able to create and introduce us only in those rules they can unlock use us.
They can reset passwords and they can assign users to specific profiles so they can look what quantity
the those specific profiles that are assigned to them they cannot create users in all the profiles across
the aisle.
No not possibly only in specific rules only on specific profiles and only some specific permissions
set which is assigned to them when those permissions sets they'll be able to assign or remove models
use us.
And if they can log in as a user who has granted logging access to the administrator they can manage
custom objects but again not all custom objects only custom objects that got assigned to them.
But when we say manage custom objects and not all of the features of the custom objects they might be
able to work with relationships they can create any relationships they cannot edit any relationships
they cannot edit any awkward sharing befalls
so they can work only the doors competence that got assigned to them and maybe there is a possibility
that the same person can be in the front delegated groups that can be different delegated groups in
a sense for sort of them the same person can be a part of what the groups.
So in those scenarios what happens is he get access to both the competence of the system say for example
from one group he gets access to up permissions set permissions at 8:00 and another group he gets access
to permissions said beep.
So in those scenarios he can basically work with both the competence and delegated groups
and as mentioned here we should also note that while selecting rules for me like creating new users
we have the non specified option but then for these delegated administrators we do not have that none
specified option.
He has to assign a role for those new users and the role also should be would be one of those roles
which is assigned to him on maybe a subordinate role.
The role that just below that assigned role in the old hierarchy and he cannot modify profiles it cannot
modify mission sets.
So this is all the privileges that are delegated administrative get basically delegated as administrator.
As I already mentioned it would be some business user who gets access to some limited administrative
duties so he can take care of his own team for effect.
And now that we have understood the concept of delegated administration what we are going to do is we
are going to go to our sales order with the developer at all and we are going to create a dedicated
administrative group and in that we are going to add some users and we are going to test results I have
not logged into our sales calls develop at all.
And as you can see I have not been as used to basically the user who is not the system administrator
we know we can have again how only to use us the fullest use it as the system our menu set the second
use it is a not a system admin users I have loved them as the user it was not a system administrator
so basically to replicate the scenario that we have in real time venues that do not have the administrator
privileges.
So he is that kind of a use.
So now go for users manage user users and you can see that there is no new button meaning that the user
can ask that you cannot create any new users.
So now what we are going to do is we are going to log in as a system administrator we are going to create
the delegated administrator a little in that we are going to add a user to and we are going to see if
this use it gets the privilege of creating a new user.
Now I have logged in as a system administrator lets created I delegated administrator group.
So this is other delegated groups.
As such we do not have any delegated groups in our system.
So I'm going to create one say for example
delegated sales team
and enable group for logging access.
So enabling this would basically give the access privileges for these users to log in as the other user
okay.
Now the delegated sales team group is created.
Now we are going to add could arguably be the delegated administrators so we assets how only one user
which we can add that does user do.
So let me add user 2 as part of this group OK so now we have added the administrators LPA.
Now we have to specify what all the privileges that he can do.
So use that administration here.
We have to specify what all the rules that he can work with.
Say for example the delegated administrator is creating I use it so that all the rules that he can assign
to
so let me say V.P. marketing
and BP international sales
will affect and assign a b profiles.
Let me say only the sales profile and the support profile.
The data may not be appropriate because in real time Michael B.
You wouldn't be actually like working on these kind of profiles.
The sales team would basically work with the sales profile and its related profiles.
And so if you are creating a delegated sales team group but they would work only those related profiles
for a sales team.
They would only work with those related permission sets.
But as we do not have that data I am I'm just randomly adding a couple of permissions that we are just
going to test this and do you understand the functionality.
So he had let me just say access to marketing app
so permissions that said also assigned assigned public groups we only have only one public group
and finally Custom Object administration so we put all the objects that they can work with.
Let me just choose o one single object.
Let's say the student object bluffing.
So what we did we created a delegated group and then the added delegate dragon status to the group.
We can add more administrators in real time and have modules this will begin add more administrators
and these are all the privileges that the administrators get for use in administration begin work with
these rules.
These profiles these permissions set these public groups and these objects.
In fact they can work one lead the D competence.
So now that we have created this group and assign administrators it's time for us.
I blog and ask a delegated administrator and check how it is working.
I have no logged in as user to let me go for use us and now I see these buttons.
Previously I was not able to because I wasn't administrator then but now I am I'm given the administrative
privileges.
So I see these buttons here.
Then you use it button and here you'll see like virtually all the rules that I can assigned to.
Unlike system administrator that and I get the list of all the rules and all I do not get all these
rules.
I only get those rules which are assigned to me as part of the delegated administrator and also the
rules that govern the reporting basically under those in the old hierarchy and a full profiles of you
do not asset Jesse any options because it depends on the user license.
This is developed at all we have already created the actual user so that's it is and like we are not
able to access those profiles but otherwise in real time yes of you would then you select this option
we would be able to select those up profiles.
So now let me hit cancel because it will not be able to create this user but those signing a profile.
However I just wanted to show you the concept public works going back here.
So as part of this delegated administration view they're able to luckily it be that actually not able
to create technically.
However in real time yes we would be able to create and we also see that those options are available
outlets and the reset passwords that also Yeah we have that button and unlock users when users get locked.
Yes we can unlock them.
Assigning users to specific profiles assigning or removing permissions set a Yeah.
So these administrators will also get access to permissions set those which are assigned to them.
So go for permissions set.
I think this is only by omission said that we give access to this particular user.
So you see the manager assignments and you also see the user.
And here there is only one user.
But otherwise in real time you will have all the users listed out here.
Meaning the user gets the access level to assign this permissions signal that he was us and the delegated
administrator.
He would be able to log in as the other users.
Yes.
And managing custom objects.
Yes.
This every did not see you turn it on.
So basically even some custom objects are assigned to their delegated administrator.
They will get those privileges to customize those custom objects.
However they cannot work on relationships or these are great.
Sharing Defaults.
So let me go to the org and I think we provided access to the student object so the student object go
for set up go for custom objects
right.
So as you see here that this particular user has only got access to this particular object.
Why he has got the access to delegated administration.
He doesn't have access to the other objects.
So this is what we see.
Then he can go to the object definition page and he can those unpredictable what he.