What is the use of Profiles in Salesforce.com

Profiles help determine record privileges. Assuming the User can see the record, Profiles determine what the User can do, view or edit on that record. Profiles control other system privileges as well (mass email, export data, etc) . we have many types of permissions.

Custom App Settings

Tab settings for standard/custom obj – default off?

Administrative permissions

General User Permissions

Object Permissions for standard/custom obj              

Field level security for standard/custom obj

Record Type Settings

Enable Apex/VF files

What is the Use of Roles in Salesforce.com

What is the Use of Roles in Salesforce.com

Roles are one of the ways you can control access to records. They also impact reports (e.g. "My Teams" filter). Roles come into play if your security model (OWDs) are set to private. There are four levels of access that can be set:

Public Read/Write/Transfer (only available of Leads and Cases)

Public Read/Write

Public Read/Only

Private

Difference between Roles and Profiles

Difference between Roles and Profiles

The way I normally explain this is that the Role determines what is visible to the user and the Profile determines what actions they are allowed to perform.

Profile – gives combination of access control and permission to users.

Permission set  -It enhances functionality of profiles.

Imagine a scenario where only one user needs access to "Account " object and he belong to some 'Any XYZ' profile. then we need to modify that profile which will effect other users with the same profile.(one profile have many users  )

so alternatively we can create a permission set with access to "Account“ object and assign that to that particular user.

Assigned Apps

Settings that specify which apps are visible in the app menu

Assigned Connected Apps

Settings that specify which connected apps are visible in the app menu

Object Settings

Permissions to access objects and fields, and settings such as tab availability

App Permissions

Permissions to perform app-specific actions, such as "Manage Call Centers"

Apex Class Access

Permissions to execute Apex classes

Visualforce Page Access

Permissions to execute Visualforce pages

System Permissions

Permissions to perform actions that apply across apps, such as "Modify All Data"

What is the use of Public group in Salesforce

What is the use of Public group in Salesforce

Groups are sets of users. They can contain individual users, other groups, the users in a particular role or territory, or the users in a particular role or territory plus all of the users below that role or territory in the hierarchy.

There are two types of groups:

§  Public groups—Only administrators can create public groups. They can be used by everyone in the organization.

§  Personal groups—Each user can create groups for their personal use.

You can use groups in the following ways:

§  To set up default sharing access via a sharing rule

§  To share your records with other users

§  To specify that you want to synchronize contacts owned by others users

§  To add multiple users to a Salesforce CRM Content library

§  To assign users to specific actions in Salesforce Knowledge

Salesforce.com Public Group Considerations

Salesforce.com Public Group Considerations:

§  Create groups with at least a few users who need the same access.

§  Create groups with members who don’t frequently need to be moved in or out of the groups.

§  Avoid creating groups within groups that result in more than five levels of nesting.

§  Enable automatic access to records using your role hierarchies in public groups by selecting Grant Access Using Hierarchieswhen creating a group. However, deselect this option if you’re creating a public group with All Internal Users as members.