How can I restrict a user to do only the following activities?

  • User maintenance - Create Users, Deactivate Users, Change Permissions, Change Role in hierarchy, Update Name, Federation Id, and other user attributes
  • Add Help Text
  • Create Fields, modify field attributes, remove from page layouts, modify page layouts, update pick-lists
  • Create email template, update email template

The user should not have the ability to view/modify all data.

  • So you want this user not to be able to modify the data like Accounts, Contacts, Opportunities, Cases, etc?
    – Dave Humm
    Jun 29 '16 at 8:17
  • Yes. The user should be able to do only those above mentioned activities Jun 29 '16 at 8:22

Please note that granting Customize Application permission will automatically grant additional permissions, however this permission is required in order to make the types of changes you described.

See also More Specific Permissions for Managing Users for more specific User management permissions that are available.

The permissions I described above can be granted using either Profiles or Permission Sets.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.