Try It Out: Define the Recruiting Manager Administration Group

We'll start by creating the delegated administration group:

1. From Setup, click Security Controls | Delegated Administration.
2. Click New.
3. In the Delegated Group Name text box, enter Recruiting App Admins.
4. In the Delegated Group detail page, click Edit.
5. Select the Enable Group for Login Access checkbox.

The Enable Group for Login Access option allows the delegated administrators in this group to log in as a user who has explicitly granted login access to administrators for a specific period of time. This can be useful for troubleshooting problems that might arise for the user.

6. Click Save.

In the Delegated Group detail page, we can use the Delegated Administrators related list to specify the users to include in this group.

7. Click Add in the Delegated Administrators related list.
8. In the first empty text box, enter Phil Katz, the Recruiting Manager at Universal Containers.

   Members of delegated administrator groups must have the “View Setup and Configuration” permission.

   Note

Each delegated administration group can have up to five members, but we're only going to include our Recruiting Manager in this group, due to the focus of our app.

9. Click Save.

We're back on the Delegated Group detail page. The User Administration related list lets us specify the kinds of users this group can manage.

10. Click Add in the User Administration related list.

Instead of selecting individual users to manage, we'll select them by their roles. For each role we select, its subordinate roles are automatically selected too. (Flip back to the Universal Containers role hierarchy if you can't remember which roles are subordinate.) We don't want to let members of this group administer the Salesforce accounts of executives at Universal Containers, but the group should be able to administer the Recruiting app for recruiters, directors, managers, and their subordinates.

11. In the Roles and Subordinates boxes, enter:
    • Recruiter
    • Director Product Management
    • Director QA
    • SW Dev Manager
12. Click Save.

The Assignable Profiles related list lets us specify the profiles this group can assign to the users they manage. Note that delegated administrators can’t modify these profiles; they can only assign users to them.

13. Click Add in the Assignable Profiles related list.
14. In the Assignable Profiles boxes, enter Recruiter and Standard Employee.
15. Click Save.

The Custom Object Administration related list lets us specify the custom objects that delegated administrators of this group can administer. The delegated administrators can manage just about every aspect of the custom object, such as modifying page layouts, adding fields, and even deleting the object; however, they can’t set permissions for the custom object, manage workflow and sharing for the object, and modify relationships to other objects.

16. Click Add in the Custom Object Administration related list.

Let's give the members of this delegated administrator group (in this case, Phil) the ability to modify the Position object. That way, if position records need another field or hiring managers request another record type in the future, Phil can handle it. (Of course, we'll also want to warn Phil that he should be careful not to delete the Position object altogether—custom object administrative rights give him that power as well!)

17. In the first empty text box, enter Position.
18. Click Save.

That wraps up the configuration of our delegated administration group! Our Recruiting app now has a delegated administrator who can provide our primary Salesforce administrator with some relief.