Security Implementation Guide

Security Overview
Securing and Sharing Data
User Permissions and Access
Revoking Permissions and Access
Profiles Overview
Enhanced Profile User Interface Overview
Working with Profiles in the Original Profile Interface
Editing Profiles in the Original Profile Interface
Viewing and Editing Tab Settings in Permission Sets and Profiles
Enable Custom Permissions in Profiles
Assigning Record Types and Page Layouts in the Enhanced Profile User Interface
Permission Sets
Object Permissions
Field-Level Security Overview
User Permissions
Desktop Client Access Overview
Setting Login Restrictions
Managing Salesforce Classic Permissions
About Organization-Wide Sharing Defaults
Setting Your Organization-Wide Sharing Defaults
External Organization-Wide Defaults Overview
Sharing Rules Overview
User Sharing Overview
Roles Overview
About Groups
Creating and Editing Groups
Group Member Types
Viewing All Users in a Group
Granting Access to Records
Configuring Salesforce Security Features
Enabling Single Sign-On
Monitoring Your Organization's Security
Security Tips for Apex and Visualforce Development
PDF

Newer Version Available

This content describes an older version of this product. View Latest

Editing Profiles in the Original Profile Interface

In standard profiles, you can edit a limited number of settings. In custom profiles, you can edit all available permissions and settings, except the user license.
Available in: Enterprise, Performance, Unlimited, Developer, and Database.com Editions

User Permissions Needed
To edit profiles: “Manage Profiles and Permission Sets”

AND

“Customize Application”
  1. From Setup, click Manage Users | Profiles.
  2. Select the profile you want to edit.
  3. On the profile detail page, click Edit to change any of the following settings:
    • For custom profiles only, the name and description
    • App visibility settings
    • Connected apps accessible to this profile
    • Tab visibility settings
    • For custom profiles only, administrative and general permissions
    • Object permissions

      Editing some permissions can cause other permissions to be enabled or disabled. For example, enabling “View All Data” automatically enables “Read” for all objects. Likewise, enabling “Transfer Leads” automatically enables “Read” and “Create” on leads.

      Note

      If enhanced profile list views are enabled for your organization, you can change permissions for multiple profiles from the list view.

      Tip

    • Desktop client access settings
You can also view or edit the following settings from the profile detail page:
Setting To View or Edit...
Console layouts for all profiles Under the Console Settings section, click Edit.
Page layouts Under the Page Layouts section, click View Assignment next to an object name.
Access to fields in each object Under the Field-Level Security section, click View next to an object name.
Record types Under the Record Type Settings section, click Edit next to a tab name. The Edit link is available only if record types exist for the object.
Login hours Under the Login Hours section, click Edit.
Login IP address ranges Under the Login IP Ranges section, click New, or click Edit next to an existing IP range.

You can limit all access to Salesforce to only those IPs in Login IP Ranges. For example, suppose a user logs in successfully from an IP address defined in Login IP Ranges. The user then moves to a different location and has a new IP address that is outside of Login IP Ranges. When the user tries to access Salesforce, including access from a client application, the user is denied. To enable this option, in Setup, click Security Controls | Session Settings and select Enforce login IP ranges on every request. This option affects all user profiles that have login IP restrictions.

Note
Executable Apex classes Under the Enabled Apex Class Access section, click Edit.
Executable Visualforce pages Under the Enabled Visualforce Page Access section, click Edit.
External data sources Under the Enabled External Data Source Access section, click Edit.
Service presence statuses Under the Enabled Service Presence Status Access section, click Edit.
Custom permissions Under the Enabled Custom Permissions section, click Edit.