Sunteți pe pagina 1din 24
Salesforce FAQs Collection part III Security in SalesForce CRM Description: BISP is committed to provide
Salesforce FAQs Collection part III
Security in SalesForce CRM
Description:
BISP is committed to provide BEST learning material to the beginners and advance learners.
In the same series, we have prepared a complete end-to end Hands-on Beginner’s Guide for
SalesForce. The document focuses on common questions being asked in interview related to
security in Salesforce. Join our professional training program and learn from experts.
History:
Version Description Change
0.1
Initial Draft
0.1
Review#1
Author
Chandra Prakash Sharma
Amit Sharma
Publish Date
10 th Jan 2013
12 th Jan 2013
www.bispsolutions.com
www.bisptrainigs.com
www.hyperionguru.com
Page 1

Question 1 : A custom profile does not appear for Custom object.

Problem :

We have created a custom object "SAP Accounts" on Custom Object. We have already created a custom user profile "USER1" which we want to use to access this custom object " SAP Accounts ". We have set the object access to "USER1". But it is showing the message that we need to give "USER1" Read permission on Custom Object. Step1 : Here you can see in user1 " SAP Account " custom object data is read only.

" SAP Account " custom object data is read only. Solution : Step 1. Login Admin
" SAP Account " custom object data is read only. Solution : Step 1. Login Admin
" SAP Account " custom object data is read only. Solution : Step 1. Login Admin
" SAP Account " custom object data is read only. Solution : Step 1. Login Admin
" SAP Account " custom object data is read only. Solution : Step 1. Login Admin

Solution : Step 1. Login Admin account, Then go to Setup > Manage Users > Profiles, select profile name(Which given user), Click on Edit Profile. see below.

name(Which given user), Click on Edit Profile. see below. www.bispsolutions.com www.bisptrainigs.com

Page 2

Step 2 :

After that go to down and check " Custom Object Permissions " in " Custom Object Permission " check all check box and save for Custom object " SAP Accounts ". see below.

for Custom object " SAP Accounts ". see below. After that you can check user1 profile
for Custom object " SAP Accounts ". see below. After that you can check user1 profile
for Custom object " SAP Accounts ". see below. After that you can check user1 profile

After that you can check user1 profile . show below.

below. After that you can check user1 profile . show below. Question 2 : limiting managers
below. After that you can check user1 profile . show below. Question 2 : limiting managers

Question 2 : limiting managers in the same role access to certain data.

Page 3

Problem : What is the best way to limit managers in the same role to being able to only see the records they own and those of their subordinates.

see the records they own and those of their subordinates. Solution : Suppose you are setting
see the records they own and those of their subordinates. Solution : Suppose you are setting
see the records they own and those of their subordinates. Solution : Suppose you are setting

Solution :

Suppose you are setting this requirement for Student(This is a custom object) then follow following steps :

Step 1:

Set organization wide access of the Student to Private. Go to Setup > Administration setup > Security controls > Sharing settings > Organization- wide-defaults > Edit > Corresponding to that object set it to Private.

Edit > Corresponding to that object set it to Private. Step 2 : Create role hierarchy
Edit > Corresponding to that object set it to Private. Step 2 : Create role hierarchy
Edit > Corresponding to that object set it to Private. Step 2 : Create role hierarchy

Step 2 : Create role hierarchy and assign respective roles to managers and subordinates. Go to Setup > administer > Manage User > Role, Then create role.

Page 4

Step 3 : In organization wide access check the option " Grant access using hierarchy"
Step 3 : In organization wide access check the option " Grant access using hierarchy"
Step 3 : In organization wide access check the option " Grant access using hierarchy"
Step 3 : In organization wide access check the option " Grant access using hierarchy"

Step 3 : In organization wide access check the option " Grant access using hierarchy" . Set organization wide access of the Student to Private. Go to Setup > Administration setup > Security controls > Sharing settings > Organization- wide-defaults > Edit > checked the check box " Grant access using hierarchy".

the check box " Grant access using hierarchy". After set private field. you can see below.
the check box " Grant access using hierarchy". After set private field. you can see below.

After set private field. you can see below.

Page 5

Question 3 How to create profile in free version? Solution : Create account on SalesForce,
Question 3 How to create profile in free version? Solution : Create account on SalesForce,
Question 3 How to create profile in free version? Solution : Create account on SalesForce,

Question 3 How to create profile in free version?

Question 3 How to create profile in free version? Solution : Create account on SalesForce, you

Solution :

Create account on SalesForce, you have two ways.Go to below link. 1. http://www.salesforce.com 2. http://www.Developer.Force.com For create Free version in SalesForce prefer way is go to link number (2) . you can see below. Step 1 : Open web browser Enter address on URL http://www.Developer.Force.com, Click on Join Now Button. see below.

Click on Join Now Button. see below. Step 3 : After Click on Joint Button open
Click on Join Now Button. see below. Step 3 : After Click on Joint Button open

Step 3 : After Click on Joint Button open new page, Registration page it show in figure.

Page 6

Note 1. First Name, Last Name Field - Don't give any Space and Special character
Note 1. First Name, Last Name Field - Don't give any Space and Special character
Note 1. First Name, Last Name Field - Don't give any Space and Special character
Note 1. First Name, Last Name Field - Don't give any Space and Special character

Note 1. First Name, Last Name Field - Don't give any Space and Special character space allow. 2. And other field No Specific Validation.

Step 4 :- open your email that Enter you in Email Field. open mail that coming from inf@sforce.com show in figure

Page 7

After click this link show new web page on this page to create own password
After click this link show new web page on this page to create own password
After click this link show new web page on this page to create own password
After click this link show new web page on this page to create own password
After click this link show new web page on this page to create own password

After click this link show new web page on this page to create own password show in figure

web page on this page to create own password show in figure Click to save link

Click to save link and view home screen salesforce.com

Page 8

Note : After Logout you have to way of login 1.) http://salesforce.com click to login
Note : After Logout you have to way of login 1.) http://salesforce.com click to login
Note : After Logout you have to way of login 1.) http://salesforce.com click to login

Note : After Logout you have to way of login 1.) http://salesforce.com click to login button. 2.) http://developer.force.com click to DE Login Button

2.) http://developer.force.com click to DE Login Button Question 4: How to Open Security Token In SalesForce.com

Question 4: How to Open Security Token In SalesForce.com .

Question 4: How to Open Security Token In SalesForce.com . What is Security Token: A security

What is Security Token:

A security token is an automatically generated key by SalesForce that you must add to the end of your password in order to log into SalesForce from an untreated network. Step 1:

Click to you profile name open dropdown menu then select My Setting

profile name open dropdown menu then select My Setting Go to My Setting > personal >

Go to My Setting > personal > Reset My Security Token

Page 9

Click on Reset My Security Token link and you can see new web open new
Click on Reset My Security Token link and you can see new web open new
Click on Reset My Security Token link and you can see new web open new

Click on Reset My Security Token link and you can see new web open new web page.

Token link and you can see new web open new web page. Step 2 : After

Step 2 :

After That you can see Reset Security Token button Click on this button.

can see Reset Security Token button Click on this button. Step 3 : After Click Reset
can see Reset Security Token button Click on this button. Step 3 : After Click Reset

Step 3 :

After Click Reset Security Token button, the token has been send on your mail id check your mail id and how to use security token instruction all so write here. you can see below.

Page 10

Question 5 : How to permit VisualForce Page Access in User Account. Problem: when I
Question 5 : How to permit VisualForce Page Access in User Account. Problem: when I
Question 5 : How to permit VisualForce Page Access in User Account. Problem: when I

Question 5 : How to permit VisualForce Page Access in User Account.

Problem: when I login my user account VisualForce page (NewExample9) not view give me error . see below.

page (NewExample9) not view give me error . see below. Solution : Step 1: Login your
page (NewExample9) not view give me error . see below. Solution : Step 1: Login your
page (NewExample9) not view give me error . see below. Solution : Step 1: Login your

Solution :

Step 1:

Login your admin account then go to Setup > Manage Users > User. Select user Profile which want to show VisualForce page. See below.

user Profile which want to show VisualForce page. See below. www.bispsolutions.com www.bisptrainigs.com

Page 11

Step 2 :

Then Go to down find " Enable VisualForce Page Access " then Click on Edit button.

VisualForce Page Access " then Click on Edit button. Step 3 : Then select Available VisualForce
VisualForce Page Access " then Click on Edit button. Step 3 : Then select Available VisualForce

Step 3 : Then select Available VisualForce page and add. You can see below.

Step 4 : After that go to user page and you can view VisualForce page.
Step 4 : After that go to user page and you can view VisualForce page.
Step 4 : After that go to user page and you can view VisualForce page.
Step 4 : After that go to user page and you can view VisualForce page.

Step 4 : After that go to user page and you can view VisualForce page. see below.

to user page and you can view VisualForce page. see below. www.bispsolutions.com www.bisptrainigs.com

Page 12

Question 6 : How to set login hours for user.

Problem : We have one user I want to set user login hours. user login time only 10am IST to 6 pm IST. See below user login 8:36 AM IST .

10am IST to 6 pm IST. See below user login 8:36 AM IST . Solution :
10am IST to 6 pm IST. See below user login 8:36 AM IST . Solution :
10am IST to 6 pm IST. See below user login 8:36 AM IST . Solution :

Solution :

Step 1 :

Go to your Admin account Then go to Setup > Manage User > User, Select user (which user want to set login hours) see below.

Select user (which user want to set login hours) see below. Step 2 : Go to
Select user (which user want to set login hours) see below. Step 2 : Go to
Select user (which user want to set login hours) see below. Step 2 : Go to

Step 2 : Go to down and see Login Hours, click on Edit Button. see below

to down and see Login Hours, click on Edit Button. see below www.bispsolutions.com www.bisptrainigs.com

Page 13

Step 3 : Here you can set login hours day wise.

Step 3 : Here you can set login hours day wise. After set login hours then
Step 3 : Here you can set login hours day wise. After set login hours then
Step 3 : Here you can set login hours day wise. After set login hours then
Step 3 : Here you can set login hours day wise. After set login hours then

After set login hours then you can try to login. it show you Error message. you can only login 10 AM

IST -

6 PM IST.
6 PM IST.
you Error message. you can only login 10 AM IST - 6 PM IST. Question 7:

Question 7: How to set Login IP Ranges for user.

Page 14

Problem: We have some user I want set Login IP Ranges. Ex: I am set this IP 192.168.1.2 for user, user can login on this IP only other IP is not allow to login. You can see that time user login any IP address. see below.

You can see that time user login any IP address. see below. Solution : Go to
You can see that time user login any IP address. see below. Solution : Go to
You can see that time user login any IP address. see below. Solution : Go to
You can see that time user login any IP address. see below. Solution : Go to

Solution : Go to your Admin account Then go to Setup > Manage User > User, Select user (which Profile want to set IP Ranges) see below.

Select user (which Profile want to set IP Ranges) see below. Step 2 : Go to
Select user (which Profile want to set IP Ranges) see below. Step 2 : Go to

Step 2 : Go to down and see Login IP Ranges, click on Edit Button. see below

and see Login IP Ranges , click on Edit Button. see below Step 3 : Set

Step 3 : Set here start IP Address or End IP Address. you can see below.

Page 15

After set IP Ranges then you can try to login. it show you Error message.
After set IP Ranges then you can try to login. it show you Error message.
After set IP Ranges then you can try to login. it show you Error message.

After set IP Ranges then you can try to login. it show you Error message. you can only login 192.168.1.10

it show you Error message. you can only login 192.168.1.10 Question 8: How to Enabled Apex
it show you Error message. you can only login 192.168.1.10 Question 8: How to Enabled Apex

Question 8: How to Enabled Apex Class Access in User Account.

Page 16

Problem : when I login my user account Apex Class not is there view. See below. For see Apex Class in User Account Setup > Develop > Apex Class.

in User Account Setup > Develop > Apex Class. Solution : Step 1: Go to your
in User Account Setup > Develop > Apex Class. Solution : Step 1: Go to your
in User Account Setup > Develop > Apex Class. Solution : Step 1: Go to your

Solution :

Step 1:

Go to your Admin account Then go to Setup > Manage User > User, Select user (which Profile want to set enable Apex Classes) see below.

(which Profile want to set enable Apex Classes) see below. Step 2 : Go to down
(which Profile want to set enable Apex Classes) see below. Step 2 : Go to down
(which Profile want to set enable Apex Classes) see below. Step 2 : Go to down

Step 2 : Go to down and see " Enable Apex Classes ", click on Edit button.

" Enable Apex Classes ", click on Edit button. Step 3 : Select Available Apex Class

Step 3 : Select Available Apex Class and click on Add button, save it. See below.

Page 17

After that go to user profile and check this page, now this apex page available
After that go to user profile and check this page, now this apex page available
After that go to user profile and check this page, now this apex page available

After that go to user profile and check this page, now this apex page available on user profile.

this page, now this apex page available on user profile. Question 9 : How to set
this page, now this apex page available on user profile. Question 9 : How to set

Question 9 : How to set Field level Security .

Page 18

Problem : User1 (Asst. Manager1 )login see all account Fields. User 2 (Asst. Manager2) login see not see account All fields.

User 1(Asst. Manager1 ) Profile :

see account All fields. User 1(Asst. Manager1 ) Profile : Solution : Step 1: Go to
see account All fields. User 1(Asst. Manager1 ) Profile : Solution : Step 1: Go to
see account All fields. User 1(Asst. Manager1 ) Profile : Solution : Step 1: Go to
see account All fields. User 1(Asst. Manager1 ) Profile : Solution : Step 1: Go to

Solution :

All fields. User 1(Asst. Manager1 ) Profile : Solution : Step 1: Go to your Admin

Step 1: Go to your Admin account Then go to Setup > Manage User > User, Select user (which Profile want to set Field level Security) see below.

(which Profile want to set Field level Security) see below. Step 2 : After that click

Step 2 : After that click on Clone button.

Page 19

Step 3 : Enter here profile Name. then click on Save button. Step 4 :
Step 3 : Enter here profile Name. then click on Save button. Step 4 :

Step 3 : Enter here profile Name. then click on Save button.

3 : Enter here profile Name. then click on Save button. Step 4 : After that
3 : Enter here profile Name. then click on Save button. Step 4 : After that
3 : Enter here profile Name. then click on Save button. Step 4 : After that
3 : Enter here profile Name. then click on Save button. Step 4 : After that

Step 4 : After that go to Setup > Users > select user (User2 Asst. Manager2), Click on Edit button. see below.

( User2 Asst. Manager2 ), Click on Edit button. see below. www.bispsolutions.com www.bisptrainigs.com

Page 20

Step 5 : Here you can select Profile "AsstFild", then save it.

you can select Profile " AsstFild ", then save it. Step 6 : Then again go
you can select Profile " AsstFild ", then save it. Step 6 : Then again go
you can select Profile " AsstFild ", then save it. Step 6 : Then again go

Step 6 : Then again go Setup > Users > select user (User2 Asst. Manager2),and click on " AssFild "

( User2 Asst. Manager2 ),and click on " AssFild " Step 7 : After click, Go
( User2 Asst. Manager2 ),and click on " AssFild " Step 7 : After click, Go

Step 7 : After click, Go to down you can see " Field-Level Security " here you can click on Account " view ". then click on Edit button.

on Account " view ". then click on Edit button. www.bispsolutions.com www.bisptrainigs.com

Page 21

Step 8 : Unchecked visible field's(which want to you). then click on Save button.

field's(which want to you). then click on Save button. Step 9 : After that login User2(Asst.
field's(which want to you). then click on Save button. Step 9 : After that login User2(Asst.
field's(which want to you). then click on Save button. Step 9 : After that login User2(Asst.

Step 9 : After that login User2(Asst. Manager2) account, here you can see some Field's messing. you can see below.

you can see some Field's messing. you can see below. www.bispsolutions.com www.bisptrainigs.com
you can see some Field's messing. you can see below. www.bispsolutions.com www.bisptrainigs.com

Page 22

Question 10: Object level Security.

Problem : I want to hide Tab User2 (Asst. Manager) but User1 can see this Tab.

hide Tab User2 (Asst. Manager) but User1 can see this Tab. Solution : Step 1: Go
hide Tab User2 (Asst. Manager) but User1 can see this Tab. Solution : Step 1: Go
hide Tab User2 (Asst. Manager) but User1 can see this Tab. Solution : Step 1: Go
hide Tab User2 (Asst. Manager) but User1 can see this Tab. Solution : Step 1: Go

Solution :

Step 1: Go to Setup > Users > select user (User2 Asst. Manager2), and click on " AssFild " then click on Edit button.

click on " AssFild " then click on Edit button. www.bispsolutions.com www.bisptrainigs.com

Page 23

Step 2 : After Edit Go to down and find Tab setting, here find Account Tab and set " Tab Hidden". and save it.

Account Tab and set " Tab Hidden". and save it. After that you can see both
Account Tab and set " Tab Hidden". and save it. After that you can see both
Account Tab and set " Tab Hidden". and save it. After that you can see both

After that you can see both user.

Hidden". and save it. After that you can see both user. www.bispsolutions.com www.bisptrainigs.com
Hidden". and save it. After that you can see both user. www.bispsolutions.com www.bisptrainigs.com

Page 24