What is profile in Salesforce? What does Profile can Control?

What is Profile in Salesforce:  A profile is a collection of user settings and user permissions that will define how a user access records.
-Profiles control a user’s permission to perform different functions in sales force.
-A profile can have many users but a user can have only one profile.

There are two types of profiles
1. Standard profiles
2. Customers profiles

Standard profiles are provided with force.com and cannot be renamed or deleted. Custom profiles have the same functionality as standard profiles but can be named. They can also be deleted if there are no users assigned to them.


List of Standard profiles:

1. System Administrator
2. Standard User
3. Solution Manager
4. Marketing User
5. Contract Manager
6.  Read Only

To manage profiles, click setup and in the Administration set up Area, click manage users->profiles.

What does a profile control?

Profiles control the following:
1. Page layouts: which page layout the user sees.
2. Field Level Security: The FLS restricts user’s access to view and edit fields.
 -Restricts users’ access to view and edit fields.
 -Overrides any less restrictive field access settings in page layouts and search layouts.
 -Controls which fields users can access in related lists, list views, reports, email and mail merge templates custom links.
3. Custom Apps: which standard and custom application the user can view.
4. Tabs: which tabs the user can view. The following options are the tab settings options
      -Default On:  If we want a tab to be displayed.
      - Default Off:  If we want a tab not to appear on the tab panel but still allowing a user assigned to                                the profile the choice to turn the tab back on.
      -Tab Hidden: If we want the tab to be hidden without an option to the user to turn the tab back on.

5. Record Types: which record types are available to the user.
6. Login: The hours and IP Addresses from which the user can log in.
7. Administrative, General and Object permissions.

8. Object permissions:
 The object permissions are divided in to two sections, one for standard objects and another for custom objects. The permissions are
Read: The Read permission allows users to view records of this object.
Create: The create permission permits Read Access and the permission to create the records to the object.
Edit: Edit permission allows records in this object to be read and modified.
Delete: This permission enables user to read, edit and remove records from this object. Deleted records are moved to Recycle Bin, where they can be undeleted or permanently erased.

View All and Modify All: It allows users to view and modify all the fields of all records inn object, overriding every other security measure.
Note:  If we give View All and Modify All permissions at a profile level, then the security controls will not work, these permissions overrides the security controls.

Post a Comment