Salesforce Stack Exchange is a question and answer site for Salesforce administrators, implementation experts, developers and anybody in-between. It only takes a minute to sign up.
Sign up to join this community
As a System Administrator, I have a link on Contact pages to Log in as a Community User:
When most of my users log in, they have the "View Customer User" option, but not the login options. I would like to show this option for some of them -- but I can't figure out which permissions to assign to them. Which permission is it?
Note - the following permissions have not worked:
Although this question is already really old here is what I found out today by chance:
A user needs to have the Manage External Users permissions and must be included in a sharing group of the partner user's manager role.
If you navigate to a partner community user and click on the role, you see what role it reports to and in what sharing group the role is. I think per default this is "Role" & "Role, Role, Internal and Portal Subordinates". This means the user you'd like to have access to has to be in the reporting role or in a subordinate role of the reporting role
Example:
As you can see, the partner role, reports to the role "Geschäftsführung" and is shared within "Geschäftsführung". Due to our role setup, which has "Kundenbetreuung" as a direct subordinate role to "Geschäftsführung", all users in "Kundenbetreuung" which have "Manage External Users" can access that functionality.
Sub roles of a direct subordinate role of the role a partner role reports to do not have access. I had to learn that the hard way ("child" role to "Kundenbetreuung" in my example).
Check who is the account owner and their Role Hierarchy. It might be higher than the user that is trying to login as the external user (contact under this account)
I spent a day looking at the same issue only to realize that it was due to the Role Hierarchy. Very few people pay attention to it when setting these things up. With all the permissions listed in the docs your users SHOULD be able to login as community users, unless, of course, the account owner's role is higher. Wish someone could save me a day of headache by pointing this out. The post states that MOST! not ALL users are unable to see this option. To me this screams "check your record-level permissions!" aka hierarchy.
Originally, I thought this was only available to System Administrators but I now think, after a little research, that the permission you're looking for is Edit Self-Service Users.
I use the 'Manage External Users' permission for this in combination with 'Edit' on Account and it works fine.
That's a lot safer than giving them 'Manage Users'.
So I guess that means the Docs are also wrong: https://help.salesforce.com/HTViewHelpDoc?id=networks_create_external_users.htm&language=en_US
I experienced this same issue after a change set deployment and the only fix I found was View All and Modify All on Accounts and Contacts for the profiles that needed the access.
Looks like "Login As Portal User" button is only available to users with profiles that have the "Edit Self-Service Users" permission and "Edit" access on the account.
Just in case someone is looking at this is 2021, another thing to also check is your record sharing in addition to your object level sharing. I had an issue with this because my org-wide defaults for Accounts were set to Public Read Only. Once I gave my users read/write access via a manual sharing rule on the Account, my issue was resolved. So I think overall, these are the items Admins should check when troubleshooting this:
