1

Our project is running on secured environment. So we add IP to profile to restrict access outside of the organization. Its strictly followed in production org. But when we give dev sandbox access to developer we give admin permission to them. Some people edit the IP of admin profile and try to access outside of the organization.

So we are thinking to give admin request but not to give permission on edit IP in profile. Will that possible. ?

i am trying to change the standard user to admin user by adding permission set and system permission in profile.

Any Idea or suggestion ?

2

Refer the documentation - Set Trusted IP Ranges for Your Organization.

As you cannot change permissions on Standard profile, Try cloning the required standard profile and disable appropriate permissions mentioned below.

  1. To view network access:
    • Login Challenge Enabled
  2. To change network access:
    • Manage IP Addresses

Note: One catch is, Restricted admins can still login as some other administrator and enable it back. To avoid that, disable login as for those users.

  • +10 Yes. Rahul. It still allow user to edit/delete the IP ranges. "Manage Profiles and Permission Sets" permission restrict profile itself. I trying. I will update if can break the permission. – bharath Mar 30 '17 at 11:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.