[SalesForce] How to change profile level security permissions on an app after it’s been installed

I recently had an app that had been installed a while ago. In the mean time we had created a new profile type which, since it hadn't existed when the app was first installed, didn't have permissions to the app. I couldn't figure out how to update the profile's permissions so it could access the app. I ended up having to wait until an update came out so I could set the permissions again. I'm sure this is controlled somewhere but I couldn't find it anywhere. How obvious was the link I needed to do this?

Best Answer

Using the Enhanced Profile User Interface ( My Name -> Setup -> App Setup -> Customize -> User Interface), the Profile manager makes it very simple.

Assigned Apps

Under Manage Users -> Profiles, select the profile you want to edit. There is a screen for Assigned Apps, which will govern what the profile sees in the drop-down in the upper-right of the screen.

App Permissions

Governs general permissions for an app, such as Convert Leads inside Sales.

Object Settings

Lets you set specific permissions on fields as well as if the profile can Read, Edit, Delete the object at all.

Bulk Permissions for Apps

If you want change permissions to an application in bulk, go to My Name -> Setup -> App Setup -> Create -> Apps. Find the app, click edit, and then scroll down. You will see a list of Profiles and checkboxes that dictate if they can see the app and if it is the profile's default app.

Note: Just because a user has access to the App does not necessarily mean they have access to the Tabs inside of the App. That will be governed by their profile's Object Settings (see above.)

Related Solutions

[SalesForce] How to access profile permissions via API

Actually, the PermissionSet SObject has a field in it called IsOwnedByProfile. Take a look at this blog post by Adam Torman, http://blogs.developerforce.com/engineering/2012/06/using-soql-to-determine-your-users-permissions-2.html:

This field determines whether a permission set is a custom one or if it is parented by a profile. This is made possible because for every profile, there is one underlying permission set. That way, permissions layer equally across permission sets without having to treat a profile differently.

So, if you want to find the CRUD permissions of a profile you can do something like this:

SELECT Id, SObjectType, PermissionsRead, PermissionsCreate
FROM ObjectPermissions
WHERE parentid in (select id from permissionset where
PermissionSet.Profile.Name = 'System Administrator')

[SalesForce] Is it possible to disable Salesforce Authenticator App completely

I know this post is old, but had to disconnect the app for a user in order to allow her to authenticate without the app so I figured I would reply.

The system administrator can disconnect app from the user profile. On the user profile, find "App Registration: Salesforce Authenticator" and then hit "disconnect".

Best Answer

Related Solutions

[SalesForce] How to access profile permissions via API

[SalesForce] Is it possible to disable Salesforce Authenticator App completely

Related Topic