Skip to main content
8 votes
Accepted

Permissions & Settings in Profile and Permission Set and its Usage

The Rule of thumb is permission set extend the access of profile and do not restrict. 1.In first scenario since profile already has access which means permission set cannot disable as permission sets ...
Mohith Shrivastava's user avatar
8 votes
Accepted

Problem using Subscriber | WSProxy inside a CloudPage

This behavior started occurring in a recent Marketing Cloud release. It occurs when you preview the CloudPage before publishing. It appears that Salesforce has changed the way that CloudPages are ...
Eliot Harper's user avatar
  • 16.6k
5 votes
Accepted

How to match profile name to ant metadata profile name and vice versa?

I think I have finally found the solution. While one of the possible point-and-click way is suggested by @user3375426 to create an outbound changeset and click add Profiles there (I have added here ...
Patlatus's user avatar
  • 17.2k
5 votes

Retrieve All Subscriber Status

These days you can use the WSProxy to achieve what you need here. Run at parent level BU. <script runat="server"> Platform.Load("core","1.1.1"); var prox = new Script.Util.WSProxy(); var id = '...
Josh de Blank's user avatar
5 votes
Accepted

Add Custom profile name to Package.xml

As for your question: I have been searching through a way add custom profile names in to Package.xml file. You can add the names of the custom profiles the way you have mentioned in your post, i.e....
Jayant Das's user avatar
  • 30.6k
5 votes
Accepted

Is there a difference between the 'Use Any Api Client' and 'API Enabled' permission for Profiles?

Administrators may grant some users API access through the “API Enabled” permission. After it’s given, this permission allows the user API access through any client (such as the Data Loader, ...
Hemavantha Rajesh Varma Mudunu's user avatar
4 votes
Accepted

Trying to limit users who have "Manage User" permission

Don't give them Manage Users. Instead, give your users a Modify All Data profile that has no administrative privileges, then set up them up as Delegated Administrators. You can choose which users they ...
sfdcfox's user avatar
  • 495k
4 votes

Don't see the "API only" permission in my Production Org (EE)

As David Cheng said in the comments, the reason you are not seeing the 'API Only User' option in this case is because the license type is "Salesforce Platform". For some obscure reason, you can only ...
codeulike's user avatar
  • 1,137
4 votes
Accepted

Custom Profile User Throws Error When Subscribing To Platform Event

We figured it out. We needed to change the Deployment Status of the Platform Event from In Development to Deployed. As the docs say: Deployment status lets you control who can access objects or ...
Carl-Johan's user avatar
3 votes
Accepted

Creating an Integration Profile (api only)

I think there are two approaches I would consider. If you are thinking security-first, I would probably clone the most minimal Salesforce user profile, and then enable only the permissions I need. ...
pchittum's user avatar
  • 19.7k
3 votes
Accepted

Error Message- Standard tabsets are not permitted for this profile

My understanding is that a Salesforce Platform license does not allow access to tabsets aka standard apps. The service cloud console an example of an app, so by having that new profile enabled in a ...
Paul H.'s user avatar
  • 1,338
3 votes

Forward to a friend - custom profile center URL

I'd advise against doing any kind of FTAF. It's a terrible user-experience. Plus, unless you have some sort of bulletproof double opt-in and suppression system, you'll likely end up marketing to ...
Adam Spriggs's user avatar
  • 30.8k
3 votes
Accepted

Revoke System Administrator Clone to become "Standard User?"

System administrator and Standard user both are salesforce license profile, so if you clone any of them you can add or remove as many permissions as you want. You can add permissions in Standard ...
Mr.Frodo's user avatar
  • 5,802
3 votes
Accepted

Don't see the "API only" permission in my Production Org (EE)

"Api Only User" is a system permission available in "System Permission" when your Enhanced Profile User Interface is enabled. Refer for more details here on the documentation. To enable the Enhanced ...
Jayant Das's user avatar
  • 30.6k
3 votes
Accepted

Cannot give profile read access to custom object

Such error on profile happens when you are on the enhanced profile view page as you can only open one object's setting at a time. You can fix this error by switching the profile view to the old style ...
Nishant Singh Panwar's user avatar
3 votes

Apex test class can't have Production profile in Scratch Org

You can include the profile in your Unlocked Package; it works the same as including any other type of metadata, just retrieve it and commit it to your repo. sfdx force:source:retrieve -u sandbox-or-...
sfdcfox's user avatar
  • 495k
3 votes

Why is this profile missing in the options of an org-wide email address and also the profile list in setup?

Guest User profiles are limited in nature. They are unauthenticated Community users, and as such, have restricted permissions compared to a normal, logged in user, including what kind of data/objects ...
sfdcfox's user avatar
  • 495k
3 votes
Accepted

Delete orphan Guest User Profile

Per Support, there is no solution for this - Guest User Profiles, even ones disconnected from any Site can't be deleted There is a Known Issue that was fixed in Winter 2020 that could have explained ...
cropredy's user avatar
  • 72k
3 votes

Access to account team member object

Based on docs Account team access is only visible if the user having below access, Edit access on account record. User is an Account owner or User need to available in above/parent Role of the ...
Raj's user avatar
  • 1,357
3 votes

Hi, I have one question regarding cloning of profile,

There is a way, but it's not very user-friendly to do so. You must already know that you can't change your license via UI. But we can change it via VSCode. You have to follow the below steps. 1) Clone ...
Elijah's user avatar
  • 839
2 votes
Accepted

Salesforce Profile clone

There's no way to determine programmatically which profile a profile was cloned from. Once cloned, it is a separate record with no link to the original. You can name the profiles to keep track, but ...
sfdcfox's user avatar
  • 495k
2 votes
Accepted

Disallow a User to Create Reports and Dashboards For a Specific Object

Assuming the object is reportable, and the user has read only access to the object, and the user can create and customize reports, you cannot block access to a specific object for reporting purposes. ...
sfdcfox's user avatar
  • 495k
2 votes

deploying new profile

Make sure that your profile has "Deploy Change Sets" & "Create and Upload Change Sets" enabled in your Administrative Permissions section. P.S - I agree with @SfdcFox's answer. Refrain urself ...
Samir's user avatar
  • 2,679
2 votes
Accepted

deploying new profile

You can't deploy a profile by itself via change sets. Doing so would render the profile completely useless in a new org. This is because things like field level security, object level security, ...
sfdcfox's user avatar
  • 495k
2 votes

user access to multiple record types

Yes, in the user's profile add the record types A and B, following the link: Assign Record Types to Profiles in the Original Profile User Interface
Santanu Boral's user avatar
2 votes

Profile issue : Agent-1 can see the Health Tab, but Agent-2 cant see the Health tab, though they are under single profile?

Agent-2 may have overridden the tabs with their own personal customisations. If so, I suspect they will still be able to get to "Health Custom" after clicking the "+" icon in the tab list. If so, ...
sunnymatharuuk's user avatar
2 votes
Accepted

Can profile settings be upgraded?

You'll want to read About Permission Sets and Profile Settings. For new permissions: Profile settings are applied to existing profiles in the subscriber's organization on install or upgrade. Only ...
sfdcfox's user avatar
  • 495k
2 votes

Unable to access static resources for some profiles

Accessing Static Resources requires the "View and setup configuration" permission. View more details about managing static resources and required permission to do same @ https://help.salesforce.com/...
Mike's user avatar
  • 754
2 votes
Accepted

How to create a 100% Read-Only profile in Salesforce (including 'Salesforce objects' as shown in DataLoader)?

Unfortunately, there are no individual object permissions you can assign to Share, History, Tag, etc objects. You won't be able to remove those objects, because security is controlled by the parent ...
sfdcfox's user avatar
  • 495k
2 votes

How to move newly created salesforce profile in sandbox to production with correct permissions?

Unfortunately, deploying of a profiles was always a bit tricky in Force.com platform. The main problem is that only System permissions and some other settings are deployed with profile alone. All the ...
kurunve's user avatar
  • 4,319

Only top scored, non community-wiki answers of a minimum length are eligible