8 votes
Accepted

Permissions & Settings in Profile and Permission Set and its Usage

The Rule of thumb is permission set extend the access of profile and do not restrict. 1.In first scenario since profile already has access which means permission set cannot disable as permission sets ...
Mohith Shrivastava's user avatar
6 votes
Accepted

Problem using Subscriber | WSProxy inside a CloudPage

This behavior started occurring in a recent Marketing Cloud release. It occurs when you preview the CloudPage before publishing. It appears that Salesforce has changed the way that CloudPages are ...
Eliot Harper's user avatar
  • 16.2k
5 votes
Accepted

How to match profile name to ant metadata profile name and vice versa?

I think I have finally found the solution. While one of the possible point-and-click way is suggested by @user3375426 to create an outbound changeset and click add Profiles there (I have added here ...
Patlatus's user avatar
  • 15.8k
5 votes

Retrieve All Subscriber Status

These days you can use the WSProxy to achieve what you need here. Run at parent level BU. <script runat="server"> Platform.Load("core","1.1.1"); var prox = new Script.Util.WSProxy(); var id = '...
Josh de Blank's user avatar
5 votes
Accepted

Add Custom profile name to Package.xml

As for your question: I have been searching through a way add custom profile names in to Package.xml file. You can add the names of the custom profiles the way you have mentioned in your post, i.e....
Jayant Das's user avatar
  • 30.2k
5 votes
Accepted

Is there a difference between the 'Use Any Api Client' and 'API Enabled' permission for Profiles?

Administrators may grant some users API access through the “API Enabled” permission. After it’s given, this permission allows the user API access through any client (such as the Data Loader, ...
Hemavantha Rajesh Varma Mudunu's user avatar
4 votes
Accepted

Is it a must to have the source profile in target organisation prior to deployment

Profiles are not deployable via changesets (Not available): Components Available in Changesets Deploying a changes with profiles only sets the permissions related tot he items in the changeset and ...
Eric's user avatar
  • 53.9k
4 votes
Accepted

Trying to limit users who have "Manage User" permission

Don't give them Manage Users. Instead, give your users a Modify All Data profile that has no administrative privileges, then set up them up as Delegated Administrators. You can choose which users they ...
sfdcfox's user avatar
  • 476k
4 votes

Don't see the "API only" permission in my Production Org (EE)

As David Cheng said in the comments, the reason you are not seeing the 'API Only User' option in this case is because the license type is "Salesforce Platform". For some obscure reason, you can only ...
codeulike's user avatar
  • 1,135
4 votes
Accepted

Custom Profile User Throws Error When Subscribing To Platform Event

We figured it out. We needed to change the Deployment Status of the Platform Event from In Development to Deployed. As the docs say: Deployment status lets you control who can access objects or ...
Carl-Johan's user avatar
3 votes

Forward to a friend - custom profile center URL

I'd advise against doing any kind of FTAF. It's a terrible user-experience. Plus, unless you have some sort of bulletproof double opt-in and suppression system, you'll likely end up marketing to ...
Adam Spriggs's user avatar
3 votes
Accepted

Error Message- Standard tabsets are not permitted for this profile

My understanding is that a Salesforce Platform license does not allow access to tabsets aka standard apps. The service cloud console an example of an app, so by having that new profile enabled in a ...
Paul H.'s user avatar
  • 1,328
3 votes
Accepted

For a specific Role (or Profile or User) restrict access to certain Leads & Contacts based on field value

I suggest to setup Lead/Contact OWD as private, so that means only the owner of the records or someone higher in the role hierarchy will be able to read them. Setup > Security Controls > Sharing ...
brovasi's user avatar
  • 5,615
3 votes
Accepted

Creating an Integration Profile (api only)

I think there are two approaches I would consider. If you are thinking security-first, I would probably clone the most minimal Salesforce user profile, and then enable only the permissions I need. ...
pchittum's user avatar
  • 19.5k
3 votes
Accepted

Profile cloning and access settings on new profile

If you do define your custom fields as OWD for a parent profile, the child profile inherits them directly. This is explained in detail here as well. However, if you're not doing that and simply ...
Gaurav Kheterpal's user avatar
3 votes
Accepted

Revoke System Administrator Clone to become "Standard User?"

System administrator and Standard user both are salesforce license profile, so if you clone any of them you can add or remove as many permissions as you want. You can add permissions in Standard ...
Mr.Frodo's user avatar
  • 5,784
3 votes
Accepted

Don't see the "API only" permission in my Production Org (EE)

"Api Only User" is a system permission available in "System Permission" when your Enhanced Profile User Interface is enabled. Refer for more details here on the documentation. To enable the Enhanced ...
Jayant Das's user avatar
  • 30.2k
3 votes
Accepted

Cannot give profile read access to custom object

Such error on profile happens when you are on the enhanced profile view page as you can only open one object's setting at a time. You can fix this error by switching the profile view to the old style ...
Nishant Singh Panwar's user avatar
3 votes

Apex test class can't have Production profile in Scratch Org

You can include the profile in your Unlocked Package; it works the same as including any other type of metadata, just retrieve it and commit it to your repo. sfdx force:source:retrieve -u sandbox-or-...
sfdcfox's user avatar
  • 476k
3 votes

Why is this profile missing in the options of an org-wide email address and also the profile list in setup?

Guest User profiles are limited in nature. They are unauthenticated Community users, and as such, have restricted permissions compared to a normal, logged in user, including what kind of data/objects ...
sfdcfox's user avatar
  • 476k
3 votes
Accepted

Delete orphan Guest User Profile

Per Support, there is no solution for this - Guest User Profiles, even ones disconnected from any Site can't be deleted There is a Known Issue that was fixed in Winter 2020 that could have explained ...
cropredy's user avatar
  • 69.1k
3 votes

Access to account team member object

Based on docs Account team access is only visible if the user having below access, Edit access on account record. User is an Account owner or User need to available in above/parent Role of the ...
Mohanraj Sivalingam's user avatar
3 votes

Hi, I have one question regarding cloning of profile,

There is a way, but it's not very user-friendly to do so. You must already know that you can't change your license via UI. But we can change it via VSCode. You have to follow the below steps. 1) Clone ...
Elijah's user avatar
  • 794
2 votes

Can you deploy "Tab Hidden" to a Custom Object on a Profile using metadata API? (tabVisibilities)

You are not deleting anything, hence it's not part of the destructiveChanges. If you want to hide a tab, you should make a regular deployment by specifying "Hidden" instead of "DefaultOn" or "...
Christophe Vidal's user avatar
2 votes
Accepted

Picklist value Control visibility of records

Create a new record type for when Status__c is equal to 'A'. You can then remove visibility for the record to users with the profile you don't want to see it while allowing it for other users that you ...
crmprogdev's user avatar
  • 40.8k
2 votes

Is it possible to get for deleted profile?

Unlike records, profiles are part of the metadata, therefore they are not stored in the Recycle Bin.You may be able to recover via customer support. I'm not certain of that. Tip: Every so often, use ...
MIX DML's user avatar
  • 2,432
2 votes
Accepted

Salesforce Profile clone

There's no way to determine programmatically which profile a profile was cloned from. Once cloned, it is a separate record with no link to the original. You can name the profiles to keep track, but ...
sfdcfox's user avatar
  • 476k
2 votes
Accepted

Disallow a User to Create Reports and Dashboards For a Specific Object

Assuming the object is reportable, and the user has read only access to the object, and the user can create and customize reports, you cannot block access to a specific object for reporting purposes. ...
sfdcfox's user avatar
  • 476k
2 votes

deploying new profile

Make sure that your profile has "Deploy Change Sets" & "Create and Upload Change Sets" enabled in your Administrative Permissions section. P.S - I agree with @SfdcFox's answer. Refrain urself ...
Samir's user avatar
  • 2,639
2 votes
Accepted

deploying new profile

You can't deploy a profile by itself via change sets. Doing so would render the profile completely useless in a new org. This is because things like field level security, object level security, ...
sfdcfox's user avatar
  • 476k

Only top scored, non community-wiki answers of a minimum length are eligible