Access Profiles

Settings > Administration > Access Profiles

About Access Profiles

Users that have the Access Control/User Management permission can modify Access Profiles

Working with Access Profiles

Login IP Address Restrictions

For extra security, enter ranges of IP addresses from which users are allowed to access the platform. If a user attempts to login from a computer on a network outside of the specified range, access to the platform is denied.

Users that have the Access Control permission can specify the range of IP addresses from which user logins are allowed

To configure an IP address range

1. Click Settings > Administration > Access Profiles
2. Select the Access Profile of interest, or create a new one
3. Enter an IP address range in the text area, following these guidelines:
   • A maximum of 25 IP address ranges can be specified
   • Enter one range per row in the text area
   • Add, Modify and Delete the entries, as needed
   • Accepted format is xxx.xxx.xxx.xxx - yyy.yyy.yyy.yyy, where:
     • xxx and yyy are numbers in the range 0-255
     • xxx.xxx.xxx.xxx is less than or equal to yyy.yyy.yyy.yyy
   • To specify a single IP address, use the same IP address for the start and endpoint of the range: 192.168.1.10 - 192.168.1.10

How it works

• When a user attempts to log in, the IP address of the system the request originated from is checked against the configured settings. If the address is in the allowed range, the user can continue the login process. Otherwise, login is denied.
• Access violations are recorded in the audit log, identifying both the user and the IP address from which the login attempt originated
• Login restrictions apply to all user logins - using a web browser, Email Edition, mobile access, or REST APIs.
• The restrictions do not apply to Customer Support logins.

Administrative Permissions

Administrative Permissions are assigned in an Access Profile. They allow a user to customize selected aspects of the platform. (Data Access Permissions, in contrast, determine what objects, records, and fields a user can see by virtue of their role and team memberships.)

Tip: Users given Administrative Permissions should have the following skills: Familiarity with the platform and your organization's business processes Good understanding of the Application Design Guide Excellent understanding of the area(s) they will be modifying

User and Ownership Controls

User Management - Create and manage users and teams

Access Control - Manage roles and password policies

Change Ownership of my Team’s Records

Change Ownership of Self Owned Records

Manage Personal Setup

Reporting Controls

Create/Delete Views/Reports/Homepages

Export Views and Reports

Make Views/Reports Visible to Others

Manage Global Views/Reports

Print using Views and Reports

CRM Features

Lead and Case Assignment Policies

Notes and Attachments

Data Management Controls

Access Mass Data Operations

Import and Export Data

Manage Audit Log

Manage Recycle Bin

Manage Tags

Application Controls

Customize Objects

Manage Applications - Add/Update/Delete platform applications

Manage Packages

Manage Translation Workbench

Development Controls

Use Development Features - Work with classes, pages, sites, and other development features

Manage Debug Log

Manage Sandboxes (Only appears if sandboxes are enabled)

Account Controls

Manage Company Capabilities

Proxy Login Access

Proxy Login Configuration

Support Cases - View and modify support cases filed by others

Administer Versioning (Only appears if versioning is enabled)