As Salesforce Admins, there are a number of important skills we need to develop in order to be successful in our roles and careers. In my opinion, none of these are as crucial as user management. After all, without users we wouldn’t have anyone working in the system. In this blog, I’ll explain the two sides of user management and offer some helpful tips on how to successfully navigate user management in orgs of all sizes.
For more than six years, I’ve worked across numerous Salesforce orgs, both assisting and leading the user management aspect of administration. I’ve helped management teams better understand how to manage users within Salesforce. I’ve worked on orgs that seem to have an ever increasing number of profiles or that have user accounts which haven’t been used for several months (or, in some cases, years!). I’ve assisted management teams that are surprised they’re being asked for more licenses or that a junior member of the team has access to confidential data in their org. All this experience means I’ve got a lot to share to help you develop your own user management skills. With that, let’s take a deeper dive into user management!
There are two sides to user management in Salesforce. First, there’s the general management of user accounts. That is, setting up accounts with correct licenses, roles, profiles, permission sets, active/frozen status, and so on. Secondly, there’s the user experience aspect of designing an interface that serves the needs of users based on their assigned profile, role, and group.
Licenses: As a Salesforce Admin, it’s important to manage your available licenses effectively. One part of this is deactivating users who aren’t using Salesforce (inactive users), thus making licenses available for new user accounts. Since licenses have different restrictions and different price tags, you also need to ensure the right license type is allocated to a user. For example, does the user need a Salesforce license, a Salesforce Platform license, or a Community license? If you’re unsure whether you’re using the best license type, or you have a license type you’re unfamiliar with, I recommend speaking with your Salesforce Account Executive for guidance. Some license types are no longer available to purchase but are still available to use in existing orgs, so it may take some digging to find out how to best use the license.
Monitoring: The ongoing monitoring of users is another key aspect of general user management. I suggest you create a dashboard showing key metrics. Here are three ideas of what you can include:
The other key aspect of user management is user experience. This means designing a great user experience for assigned profiles, roles, and groups. All users are required to have a profile assigned, whereas roles and public groups are optional. However, if these are being used in your org, you must ensure you assign them correctly. Profiles and/or permission sets determine which objects and fields a user can access, whereas roles determine what records a user can see relative to others in the organization’s hierarchy.
There are several schools of thought as to how to manage profiles and/or permission sets, and that in itself could be a lengthy blog post. However, I’m becoming a great advocate of the approach of using as few profiles as possible for your users, and then using permission sets (and permission set groups) to expand a user’s access. In the Resources section below, you’ll find a video from London’s Calling community event, where #AwesomeAdmin Louise Lockie goes into the most minimal approach. I urge all admins to grab a cup of coffee or tea and settle down for 25 minutes to learn more from Louise on this best practice. To summarize this approach, you just need to create four different profiles:
You may find you don’t even need the third and fourth options. Depending on your usage, you may have just “One Profile to rule them all,” except for yourself, of course, the Salesforce Admin! From here, you can build out permission sets and put them into permission set groups in order to give users the access they need.
If you’re considering changing your org to have a master profile, then take a look at the free Salesforce Labs app called Permission Helper. This app has a Permission Analyzer that lets you look at an individual permission and understand which profiles and permission sets contain that permission. It also contains a Profile to Permission Set Converter that allows admins to create permission sets from profiles. The generated permission set includes all permissions from the selected profile which can then be assigned to the user(s).
User management is a critical skill for Salesforce Admins. You must pay careful attention to security and permissions sets in your org. You should limit data access to the lowest level possible that users need to do their jobs. This strategy is known as the principle of least privilege. Also, remember to have as few users utilizing the System Admin profile as possible. For example, if you have an IT admin who just assists in setting up user accounts, then they don’t need a full System Admin account and can be a Delegated Admin instead. You should also not allow integrations to use a System Admin profile; instead, find out what permissions they actually need and create a permission set.
Once you’ve proven your user management skills, you can replicate the process across different orgs. Due to the relevance and necessity of user management in all orgs, it’s also a great case study example to provide in job interviews. You can discuss the different processes you’d complete to review a new org as well as the steps you’d take for any follow-up items. User management is a great topic that can help you demonstrate—to current and future employers alike—how you’ll manage an org effectively.
Depending where you are in terms of your Salesforce Admin knowledge, here are my three tips on how you can learn more about user management:
As 2024 comes to a close, it’s time to reflect on all that Salesforce Admins have accomplished. ✅ This year was packed with innovation, and one of the standout milestones was the launch of Agentforce, Salesforce’s new suite of assistive and autonomous agents. With Agentforce, you can build, customize, and deploy intelligent agents tailored to […]
As Salesforce Admins, we have clear core responsibilities that define our day-to-day roles. We manage users, data, and product, provide actionable analytics, and oversee security. But we’re currently in the third wave of the artificial intelligence (AI) revolution: contextual and generative AI, characterized by prompt-based generative AI, real-time AI applications, and autonomous agents. This means […]
Over the past decade, the Salesforce Admin role has undergone a remarkable transformation, evolving alongside the platform itself from a simple CRM tool to a robust business ecosystem. As Salesforce has grown, so too has the significance and complexity of the admin role, making it one of the most critical positions within any organization leveraging […]
