1

I have created a Delegated Admin Group and add few users to this group. The Delegated Admins have access to a Public Group. This should allow them to add users to the Public Group.

Some of the users are able to see the option to add Users, Roles, etc to the Public Group. However, other users only see the option to add other Public Groups (See screen shots below). I have checked the permissions for these users and as far as I can see they have the same permissions - same profile, roles, permission sets.

What should I check to allow Delegated Admins to add individual users to a Public Group?

Only option is to add public group

Includes option to add users

2
  • 1
    do the delegated admins who can't add users to groups have the Manage Users permission?
    – cropredy
    Commented Jul 30, 2021 at 23:46
  • Hi - thank you for that pointer. Adding Manager Users permission resolved this issue.
    – Kalpesh
    Commented Aug 1, 2021 at 6:58

2 Answers 2

0

The solution is to include Manage Users permission for those users in the delegated admins. This is described in this help article Create and Edit Groups

You should be aware that Manage Users grants permissions that go way beyond creating/editing groups and you should think carefully about whether to grant such a permission to delegated admins. The permissions include access to configurations that affect record sharing so a malicious (or clueless) delegated admin could open up record visibility to users who shouldn't get it.

0

Another option that doesn't use Manage Users is to ensure the Delegated Group has the appropriate selections under 'User Administration' section of the Delegated Group. You have to add not only which Public Group you want to allow them access to add/remove from, but also which types of users they are allowed to administer. See image below where I have specified 2 Roles/subordinates and as soon as I did that, the user assigned was able to add those Roles or any user in/below them to the specified public group. This is a simpler method than opening up the Manage Users permission which gives way more than what you are looking for, as cropredy mentioned in their answer. enter image description here

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .