Defining Delegated Administrators | Salesforce

Defining Delegated Administrators

Available in: Enterprise, Performance, Unlimited, Developer, and Database.com Editions

User Permissions Needed

To delegate administration:

Customize Application

To be a delegated administrator:

View Setup and Configuration

A delegated administration group is a group of users who have the same administrative privileges. These groups are
not related to public groups used for sharing. To define a delegated administration group:
1.

From Setup, click Security Controls | Delegated Administration.

2.

Click New.

3.

Enter a group name.

4.

To allow the users in this group to log in as users in the role hierarchy that they administer, select Enable

Group for Login Access. Depending on your organization settings, individual users may need to grant
login access to allow their administrators to log in as them.
5.

Click Save.

6.

To specify the users in this delegated group, in the Delegated Administrators related list, click Add.

7.

Add users to the group. The users must have the View Setup and Configuration permission.

8.

Click Save.

Delegating Administrative Duties

Available in: Enterprise, Performance, Unlimited, Developer, and Database.com Editions

User Permissions Needed

To delegate administration:
To be a delegated administrator:

Customize Application
View Setup and Configuration

Use delegated administration to assign limited administrative privileges to selected non-administrator users in your
organization.
Delegated administrators can perform the following tasks:

Creating and editing users and resetting passwords for users in specified roles and all subordinate roles,
including setting quotas, creating default opportunity teams, and creating personal groups for those users

Unlocking users

Assigning users to specified profiles

Logging in as a user who has granted login access to their administrator

Managing custom objects created by an administrator

For example, you may want to allow the manager of the Customer Support team to create and edit users in the
Support Manager role and all subordinate roles. This allows the administrator to focus on tasks other than managing
users for every department that uses Salesforce.
To create delegated groups, from Setup, click Security Controls | Delegated Administration, then click New.
To manage your delegated groups:

Click Edit next to a group to modify it.

Select a group and click Delete to remove it.

Select a group and click Remove next to the user in the Delegated Administrators related list to remove a
user from that delegated group.

Note: To delegate administration of particular objects, use object permissions, such as View All and Modify All.