Data Security I

Managing Users

• It’s best to deactivate user than delete the user, to avoid orphan processes.
• 
• If user can’t be deactivated due to above reason, to quickly remove user access, use Freeze user under user profile. Later, you can reassign new owner/default user/lead/etc, and deactivate the user.
• 

Control Access to Objects

• 2 ways to set object permission - Profile & Permission Set.
• Big picture of Profile: Profile controls - 
  • 
  • 
  • System Administrator profile’s super powers – View all data & Modify all date -  overwrites all other sharing rules and settings. Use with caution.
• Can set system permission in profile. System permissions apply across apps, e.g. create/edit/delete reports, edit Read Only fields.
• Profile contains Apps & System sections. These 2 sections are also available from the Assigned Apps drop down list on the profile page.
  • 
• Even an app is hidden, but user might still see the records of the app in Reports/Dashboard/related list. It’s best to remove the read permission from the object permission.
• Assign profile to user at Manage Users > Users > select user > Edit > select profile from drop down list.
• Check who has this profile: Manage Users > Profiles > Assigned Users button on the top middle.