salesforce_security_impl_guide

More documents

Recommendations

Info

Securing and Sharing Data Profiles Overview Profiles Overview Profiles contain user permissions and access settings that control what users can do within your organization. Watch how you can open up access to records using the role hierarchy if your organization-wide defaults are more restrictive than Public Read/Write. Who Sees What: Record Access via the Role Hierarchy EDITIONS Available in: • Enterprise • Performance • Unlimited • Developer • Database.com A profile is a collection of settings and permissions that defines how users with particular profile access records, how they see their data, and what they can do within the application. For Salesforce CRM Group and Professional Editions, you can use the standard Salesforce CRMprofiles but you can’t create custom profiles. Even so, it’s important to understand profiles and how they work together with the organization-wide defaults and the role hierarchy. The most important profiles include: • System Administrator –Can configure and customize the application • Standard User –Can run reports and create and edit records • Read Only –Can run and export reports and view—but not edit—recordsWhen you add users as you prepare to go live, you will assign one of theseprofiles to each user. Each standard or custom profile belongs to exactly one user license type. In Contact Manager, Group, and Professional Edition organizations, you can assign standard profiles to your users, but you can't view or edit the standard profiles or create custom profiles. In Enterprise, Unlimited, Performance, and Developer Edition organizations, you can use standard profiles, or create, edit, and delete custom profiles. For standard profiles, only certain settings can be changed. Salesforce has two profile interfaces. Depending on which profile user interface is enabled in your organization, you can: • View and edit profiles in the enhanced profile user interface • View and edit profiles in the original profile user interface You can also use a list view to edit multiple profiles. 12
Securing and Sharing Data Viewing Profile Lists Viewing Profile Lists Profiles contain user permissions and access settings that control what users can do within your organization. To view the profiles in your organization, from Setup, click Manage Users > Profiles. Viewing Enhanced Profile Lists If enhanced profile list views are enabled for your organization, you can use additional tools to customize, navigate, manage, and print profile lists. • Show a filtered list of profiles by selecting a view from the drop-down list. • Delete a view by selecting it from the drop-down list and clicking Delete. • Create a list view or edit an existing view. • Create a profile. • Print the list view by clicking . • Refresh the list view after creating or editing a view by clicking . • Edit permissions directly in the list view. • View or edit a profile by clicking its name. • Delete a custom profile by clicking Del next to its name. Note: You can’t delete a profile that’s assigned to a user, even if the user is inactive. Viewing the Basic Profile List • Create a profile. • View or edit a profile by clicking its name. • Delete a custom profile by clicking Del next to its name. EDITIONS Available in: Enterprise, Performance, Unlimited, Developer, and Database.com Editions The Customer Portal and partner portals are not available in Database.com USER PERMISSIONS To view profiles, and print profile lists: • “View Setup and Configuration” To delete profile list views: • “Manage Profiles and Permission Sets” To delete custom profiles: • “Manage Profiles and Permission Sets” 13
Page 1 and 2: Security Implementation Guide Versi
Page 3 and 4: CONTENTS Chapter 1: Security Overvi
Page 5 and 6: Contents Editing Lead Sharing Rules
Page 7 and 8: CHAPTER 1 Security Overview Salesfo
Page 9 and 10: Security Overview User Security Ove
Page 11 and 12: Security Overview Custom Permission
Page 13 and 14: Security Overview CAPTCHA Security
Page 15 and 16: Security Overview Auditing • Role
Page 17: Securing and Sharing Data Revoking
Page 21 and 22: Securing and Sharing Data Cloning P
Page 23 and 24: Securing and Sharing Data App and S
Page 25 and 26: Securing and Sharing Data Working w
Page 27 and 28: Securing and Sharing Data Enable Cu
Page 29 and 30: Securing and Sharing Data Assigning
Page 31 and 32: Securing and Sharing Data Creating
Page 33 and 34: Securing and Sharing Data Editing P
Page 35 and 36: Securing and Sharing Data Searching
Page 37 and 38: Securing and Sharing Data Enable Cu
Page 39 and 40: Securing and Sharing Data Object Pe
Page 41 and 42: Securing and Sharing Data Comparing
Page 43 and 44: Securing and Sharing Data Setting F
Page 45 and 46: Securing and Sharing Data Working w
Page 47 and 48: Securing and Sharing Data Setting L
Page 49 and 50: Securing and Sharing Data Restricti
Page 51 and 52: Securing and Sharing Data Managing
Page 53 and 54: Securing and Sharing Data External
Page 55 and 56: Securing and Sharing Data Disabling
Page 67 and 68: Securing and Sharing Data Editing L
Page 69 and 70:
Securing and Sharing Data Editing C
Page 71 and 72:
Securing and Sharing Data Editing C
Page 73 and 74:
Securing and Sharing Data Sharing R
Page 75 and 76:
Securing and Sharing Data User Shar
Page 77 and 78:
Securing and Sharing Data Sharing U
Page 79 and 80:
Securing and Sharing Data Creating
Page 81 and 82:
Securing and Sharing Data Viewing A
Page 83 and 84:
Securing and Sharing Data Granting
Page 85 and 86:
Configuring Salesforce Security Fea
Page 87 and 88:
Page 89 and 90:
Page 91 and 92:
Page 93 and 94:
Page 95 and 96:
CHAPTER 4 Enabling Single Sign-On S
Page 97 and 98:
Enabling Single Sign-On • Before
Page 99 and 100:
Monitoring Your Organization's Secu
Page 101 and 102:
Page 103 and 104:
Page 105 and 106:
Page 107 and 108:
Security Tips for Apex and Visualfo
Page 109 and 110:
Page 111 and 112:
Page 113 and 114:
INDEX A Access about 10 revoking 11
Page 115 and 116:
Index Profiles (continued) object p
show all

salesforce_security_impl_guide

Create successful ePaper yourself

Delete template?

Save as template?