Contents
What can Delegated Administrator not do?
Delegated administrators: Can’t assign profiles or permission sets with the “Modify All Data” permission. Don’t see the None Specified option when selecting a role for new users. Need access to custom objects to access the merge fields on those objects from formulas.
Can delegated admin unlock community users?
Some of the duties that Delegated Administrator can perform is to create users with specific role and profile, unlock a user, reset password. Other than managing users, Delegated Administrators can also manage custom objects with a few restrictions (please refer to the links in references section below).
Which two capabilities does the Delegated Administrator permission provide?
In Salesforce delegated administrators can do following duties:
- Create and edit users in specified roles and all subordinate roles.
- Unlock users.
- Assign users to specified profiles.
- Assign or remove permission sets for users in their delegated groups.
Which two capabilities does the delegated Administrator permission provide?
How to check which users are assigned to a delegated group?
To check delegated groups and which users are assigned to them go to Setup > Adinster > Security Controls > Delegated Administration. From there you can edit the group and add/remove the assignable profiles a delegated group of admins can assign to new users.
Can a group be added to a role assignable group?
To prevent elevation of privilege, only a Privileged Authentication Administrator or a Global Administrator can change the credentials or reset MFA for members and owners of a role-assignable group. Group nesting is not supported. A group can’t be added as a member of a role-assignable group.
How to assign an administrator to a group?
For example, assume that a group named Contoso_User_Administrators is assigned the User Administrator role. An Exchange administrator who can modify group membership could add themselves to the Contoso_User_Administrators group and in that way become a User Administrator.
Why is my profile not visible while creating new user?
My profile is system admin. I am only guessing but maybe user 2 is a delegated administrator where by they can only create and assign profiles of specified types by the System Admin. To check delegated groups and which users are assigned to them go to Setup > Adinster > Security Controls > Delegated Administration.