effectively managing user permissions with a governance strategy by justice sikakane

15
Effectively Managing User Permissions with a Governance Strategy Justice P. Sikakane Salesforce.com Administrator / Configuration Developer [email protected] @JSonSalesforce https://www.linkedin.com/in/justicesikakane

Upload: salesforce-admins

Post on 16-Apr-2017

199 views

Category:

Technology


0 download

TRANSCRIPT

Effectively Managing User Permissions with a Governance StrategyJustice P. SikakaneSalesforce.com Administrator / Configuration [email protected]@JSonSalesforcehttps://www.linkedin.com/in/justicesikakane

Forward-Looking StatementsStatement under the Private Securities Litigation Reform Act of 1995:

This presentation may contain forward-looking statements that involve risks, uncertainties, and assumptions. If any such uncertainties materialize or if any of the assumptions proves incorrect, the results of salesforce.com, inc. could differ materially from the results expressed or implied by the forward-looking statements we make. All statements other than statements of historical fact could be deemed forward-looking, including any projections of product or service availability, subscriber growth, earnings, revenues, or other financial items and any statements regarding strategies or plans of management for future operations, statements of belief, any statements concerning new, planned, or upgraded services or technology developments and customer contracts or use of our services.

The risks and uncertainties referred to above include – but are not limited to – risks associated with developing and delivering new functionality for our service, new products and services, our new business model, our past operating losses, possible fluctuations in our operating results and rate of growth, interruptions or delays in our Web hosting, breach of our security measures, the outcome of any litigation, risks associated with completed and any possible mergers and acquisitions, the immature market in which we operate, our relatively limited operating history, our ability to expand, retain, and motivate our employees and manage our growth, new releases of our service and successful customer deployment, our limited history reselling non-salesforce.com products, and utilization and selling to larger enterprise customers. Further information on potential factors that could affect the financial results of salesforce.com, inc. is included in our annual report on Form 10-K for the most recent fiscal year and in our quarterly report on Form 10-Q for the most recent fiscal quarter. These documents and others containing important disclosures are available on the SEC Filings section of the Investor Information section of our Web site.

Any unreleased services or features referenced in this or other presentations, press releases or public statements are not currently available and may not be delivered on time or at all. Customers who purchase our services should make the purchase decisions based upon features that are currently available. Salesforce.com, inc. assumes no obligation and does not intend to update these forward-looking statements.

Who is Justice?Well….

My Offspring

Ambitious and Proud Millennial

2016 Distinguished Alumni (WHS)

Certified Salesforce.com Administrator

90+ Trailhead Badges

Junior Achievement of the Upper Midwest (Volunteering)

Mentoring with a focus on minority students

My kids are my source of motivation!

Being the best version of myself everyday and achieving my full potential

My Brand My Passion My Purpose

Son: Justice Jr. Daughter: Liliana Emily

What makes up a Governance Strategy

Center of Excellence (CoE)

Release Management Process

Design Standards

Building an effective framework

Center of Excellence (CoE) Release Management Design Standards

Identify/Create a simple management process to align with how and why changes are promoted into production

Ensure a well documented and communicated cadence is in place

Align a strategy and process to follow best practice

• Plan Build Test Deploy

Methods to ensure changes aren’t in conflict with another groups changes

Utilization of standard naming conventions

Leveraging descriptions fields for consistency

Ensure changes support business goals

Deployment schedules are in alignment with a release management strategy and process

Define the overall system architecture and make sure that projects adhere to corporate standards

Stakeholders from different functional groups

Continued..

How do permissions play a role in a Governance Strategy?

“The art and science of asking questions is the source of all knowledge.”- Thomas Berger

Delegated Adminstration!What’s the ask? Salesforce Functionality?

How many of you have heard this before?

“I require System Administrator privileges to perform my job in Salesforce”

Drag picture to placeholder or click icon to addDrag picture to placeholder or click icon to addDrag picture to placeholder or click icon to add

Delegated Administration

Use delegated administration to assign limited admin privileges to users in your org who aren’t administrators. 

Delegated Administrators can’t:• Can’t assign profiles or permissions sets with the “Modify

all data” permission enabled• Can’t modify permission sets

Delegated Administration in Salesforce

Delegated Administrators can:

• Assign users to specified profiles • Assign or remove permissions

sets for users in their delegated groups

• Log in as a user who has granted login access to the administrator

• Manage custom objects• Unlock users• Create and edit users in

specified roles and all subordinate roles• Resetting passwords, creating

personal groups, etc..

Providing elevated privileges

Delegated Group A

Ability to Login as Users = No

Manage Custom Objects = Yes

Ability to Assign Permission Sets = No

Ability to Assign Profiles = Yes

Ability to Login as Users = Yes

Manage Custom Objects = No

Ability to Assign Permission Sets = No

Ability to Assign Profiles = Yes

Ability to Login as Users = No

Manage Custom Objects = No

Ability to Assign Permission Sets = No

Ability to Assign Profiles = Yes

Delegated Group B

Delegated Group C

Delegated Group D

Ability to Login as Users = Yes

Manage Custom Objects = Yes

Ability to Assign Permission Sets = Yes

Ability to Assign Profiles = Yes

Delegated Administration in Action!

Creating/Defining a Delegated Administrator Group Identify your delegated admin and assign to a newly created or already established

group Add or update roles within group. Ensure roles are reflective of targeted user base in

Salesforce Update the concerning areas within the delegated group: Assignable Profiles,

Assignable Permission Sets, Assignable Public Groups and Custom Object Administration

Thank Y u