Profiles & Permission Sets in Salesforce | Object Level Security(Read,Create,Edit & Delete)

Object Level Security:

We can prevent users or group of users editing,creating,viewing or deleting records of an object by setting permission on the object.

Two ways of setting object permissions

1. Profiles

2. Permission Sets

Profile is Collection of settings and permissions that determine which data and features user will have access to

Profile Controls

1. Object Permission

2. Field Permission

3. User Permission

4. Tab setting

5. App Setting

6. Apex Class Access

7. Visualforce pages access

8. Login Ip Ranges

9. Record Types

10. Page layout

11. Login Hours

Types of Profile

We have 2 types of profiles Standard Profile and Custom Profile

Some of the default Standard Profiles

• Standard User

• Read Only

• Marketing User,Contract Manager,Solution Manager ( Including Standard User permission this profile as additional access to certain access)

• System Administrator(View All and Modified All)

why custom profiles? Object permission on Standard Profile cannot be edited

Custom Profiles

Can be made by Cloning the Standard profiles.

Every profile is based on user license type which determines features of salesforce users that will have access to.

Important Points on Profiles

1. Every profile should have atleast one visible app.

2. Tabs of objects to shown in App should have access to that object for that profile

3. A profile can be assigned to many users but users can be assigned too only one single profile at a time.

4. View all and modified all are not available for idea, articles type, pricebooks and products.

5. To view object permission: View Setup and Configure.

6. To edit object permission: Manage Profiles and Permission sets and Customize Application

Permission Set:

Collection of settings and permissions that determine which data and features user will have access to

But these are used to extend the access or grant additional access to users without modifying their profiles

Permissions are additive which means we can’t remove existing permission which they have through their profile by assigning a permission set less access. We can only add permission.

Permission sets Control:

1. Object Permission

2. Field Permission

3. User Permission

4. Tab setting

5. App Setting

6. Apex Class Access

7. Visualforce pages access

Permission set are also based on license type but its not compulsory and once assigned it cannot be changed,

A user can be assigned to the multiple permission sets..

Important Points to Remember:

In the permission set we cannot control page layout assignments.

Difference between profile and permission set.

Types of relationship in Salesforce

• Master-detail relationship

• Lookup relationship

• Self-relationship

• External lookup relationship

• Indirect lookup relationship

• Many-to-many relationship (junction object)

• Hierarchical relationship

Master-detail relationship

It is a closely coupled Salesforce object relationship, which ensures that if a

master record is deleted, the child records associated with it are also deleted.

In this type of relationship, the parent record controls the behaviour of the child record regarding visibility and sharing. It means the security setting of a parent object applies to the child object.

Example : -If we create a master-detail relationship between Meetup and Participant objects, where Meetup acts as the parent object and the

Participant acts as the child object, all the related Participant records will also be removed if anyone deletes a Meetup record.

When there is a master-detail relationship between two objects, you can create a unique type of field over the master object, called Roll-up summary. A roll-up summary field allows us to calculate values from child records, such as the number of child records linked to a parent record.

Highlights to remember:

1. If the parent record is deleted the respective child records are also deleted.

2. The parent record controls the behaviour of the child record regarding visibility and sharing. It means the security setting of a parent object applies to the child object.

3. Roll-up summary field allows us to calculate values from child records, such as the number of child records linked to a parent record.

Lookup relationship

It is a loosely coupled relationship between Salesforce objects, which ensures that even

though the parent record is removed, the child records remain in the system.

Here, both the parent and child have their own sharing settings and security controls.

Difference between master-detail and lookup relationships

Take a look at the differences between the lookup

and the master-detail relationship in the following table:

Self-relationship

Self-relationship is another example of a lookup relationship. In Salesforce, we can use lookup relationships to create self-relationship among objects; we can have a maximum of 40 self-lookups. For example as shown in the following screenshot:

External lookup relationship

External lookup relationship allows us to link an external object to a parent external object whose data is stored in an external data source. In other words, it allows us to link two external objects.

Indirect lookup relationship

An indirect lookup relationship allows us to link an external object to a standard or custom object. We can only create an indirect lookup to an object with a unique external ID field on the parent object that is used to match the records in this relationship. While creating an indirect lookup relationship field on an external object, we have to specify the child object field and the parent object field to match and associate records in the relationship.

Many-to-many relationship

The many-to-many relationship is made with the help of a junction object.

If you have two objects, called Case and Article, and you want to relate these two objects in such a manner that one case can have multiple articles and one article is linked to many cases, then we have to use the many-to-many relationship.

In this case, we can create the third object, let's say, Solution with two master-detail relationships with Solution - Case and Solution - Article.

Salesforce Configuration Topics

CRM - Customer Relationship Management 

1.             What is CRM(Customer Relationship Management)?

2.             CRM Basic entities

3.             Sub Modules of CRM

4.             Existing CRMs

Salesforce.com Introduction

1.             What is Salesforce.com?

2.             Why Salesforce.com?

3.             Different editions in Salesforce.com

4.             How to sign up for Developer Edition?

Salesforce.com Basic Navigations

1.             What are Records?

2.             What are Related Lists?

3.             Action Column

4.             Help Links

Salesforce.com Level 1 - Administration of Salesforce.com

1.             Types of Objects

                     1.1.           Standard Objects

                     1.2.           Custom Objects

2.             Types of Fields

                     2.1.           Standard Fields

                     2.2.           Custom Fields

3.             Types of Relationships

4.             Field Dependency

5.             Different types of Email templates

                     5.1.          Text

                     5.2.          HTML (using Letterhead)

                     5.3.          Custom (without using Letterhead)

                     5.4.          Visualforce

6.             Custom application

7.             Console application

8.             Field Accessibility

9.             Grant Login Access

10.            Calendar

11.            Console Tab

12.            Trusted IP Ranges

13.            Session Settings

14.            Different types of tabs

                     14.1.           Custom Object Tab

                     14.2.           Web Tab

                     14.3.           Visualforce Tab

15.            Field History Tracking in Salesforce

16.            Feed Tracking

17.            https://developer.salesforce.com/

18.            http://trust.salesforce.com

19.            View setup audit trail

20.            Organization Wide Default

21.            Roles

22.            Role Hierarchy

23.            Sharing Rules

24.            Profiles

25.            Permission Sets

26.            Password Policies

27.            Developer console

28.            Validation Rules

29.            Workflow rules

                     29.1.           Email Alert

                     29.2.           Task

                     29.3.           Field Update

                     29.4.           Outbound Message

30.            Approval process

31.            Reports and Dashboards

32.            Scheduling reports

33.            Report Types

34.            Adding dashboards in Home page

35.            Chatter

36.            Chatter Desktop

37.            Queues

38.            Public Groups

39.            Assignment Rules

40.            Auto Response Rule

41.            Views

42.            Domain Registration

43.            Search Layouts

                     43.1.           Search Results

                     43.2.           Lookup Dialogs

                     43.3.           Lookup Phone Dialogs

                     43.4.           Accounts Tab

                     43.5.           Accounts List View

                     43.6.           Search Filter Fields

44.            Page Layout

45.            Mini Console View

46.            Mini Page Layout

47.            Record Types

48.            Apex Data loader tool

49.            Force.com Explorer tool

50.            Force.com Sites

51.            Data Management

                     51.1.           Analytic Snapshots

                     51.2.           Import Accounts/Contacts

                     51.3.           Import Leads

                     51.4.           Import Solutions

                     51.5.           Import Custom Objects

                     51.6.           Data Export

                     51.7.           Storage Usage

                     51.8.           Mass Transfer Records

                     51.9.           Mass Delete Records

                     51.10.          Mass Transfer Approval Requests

                     51.11.          Mass Update Addresses

                     51.12.          Data Loader

52.            MVC Pattern

53.            Tags in Salesforce

54.            Live Agent

55.            Public Solutions

56.            Chatter Answers

57.            Entitlement Management

58.            How to access Salesforce from all IP Ranges - App Exchange application

59.            Mass Edit, Delete - App Exchange application

60.            Login Hours restriction for Profiles

61.            Edit, Delete and Clone Buttons

62.            App Exchange

63.            Chat Settings(Chat Window)

64.            Email to Case

65.            Web-to-Lead

66.            Web-to-Case

67.            Schema Builder

68.            Visualforce page

69.            Actions in Salesforce

70.            How to expire all the users password in Salesforce?

71.            How Salesforce login works? 72.            Account, Opportunity and Case teams 73.            Manual Sharing  74.            Renaming Tab Names and Labels 75.            Dataloader.Io 76.            Data.com 77.            Merge tool 78.            Chatter Approval Request 79.            https://success.salesforce.com 80.            Opportunity Split 81.            Workbench 82.            Work.com 82.            Multi-Tenant Architecture 83.            Creating Custom Tab Style in Salesforce 84.            Historical Trend Reporting 85.            Splash Page creation 86.            Escalation Rules 87.            Adding Multiple Users 88.            Account Hierarchy 89.            Solution Categories

Salesforce.com Level 2 - Development in Salesforce.com

1.              Custom Settings

2.              Visualforce Components

3.              Difference between Developer, Configuration only and Full Sandboxes.

4.              Adding controller to Visualforce page

5.              Apex Classes

6.              Custom Labels

7.              Adding Error message in Visualforce page

8.              Triggers

9.              Unit testing

10.             Batch Apex

11.             Database.SavePoint and Database.Rollback

12.             Force.com IDE installation

13.             Salseforce to Salesforce connection

14.             Calling Apex method from Custom Button

15.             Java to Salesforce connection

16.             Fetching data from another Salesforce organization

17.             Date Picker in Visualforce page

18.             With Sharing and Without Sharing in Apex Classes

19.             List, Set and Map collection data types

20.             Moving Components from one organization to another organization

21.             Creating table in VF using apex:panelGrid

22.             Standard Controller, Custom Controller and Extensions 

23.             How to create a Sandbox in Salesforce?

24.             How to login into Sandbox in Salesforce?

25.             How to create Inbound Change set?

26.             How to create Outbound Change set?

27.             Adding help text for apex:inputText

28.             Debugging Apex code

29.             Try and Catch block

30.             Governor Limits in Salesforce.com

31.             Hide and Show in Visualforce page 32.             Date and Datetime 33.             SOQL 34.             Coding Standard in Salesforce