The document focuses on troubleshooting user access problems within Salesforce, outlining best practices for utilizing profiles and permission sets, as well as a structured problem-solving funnel for resolving issues. It includes a disclaimer regarding forward-looking statements and risks associated with the company's products and services. Additional resources, tools, and a roadmap for future features are also provided to aid in user management and access control.

1. Belinda Wong
Director, Product Management
belinda.wong@salesforce.com
@BelindaWong
Troubleshoot User Access
Problems the Salesforce Way
Salesforce on Salesforce
Jordan Mangini
System Specialist
jmangini@salesforce.com
@JordanMangini

2. Forward-Looking Statements
​ Statement under the Private Securities Litigation Reform Act of 1995:
​ This presentation may contain forward-looking statements that involve risks, uncertainties, and assumptions. If any such uncertainties materialize or
if any of the assumptions proves incorrect, the results of salesforce.com, inc. could differ materially from the results expressed or implied by the
forward-looking statements we make. All statements other than statements of historical fact could be deemed forward-looking, including any
projections of product or service availability, subscriber growth, earnings, revenues, or other financial items and any statements regarding strategies
or plans of management for future operations, statements of belief, any statements concerning new, planned, or upgraded services or technology
developments and customer contracts or use of our services.
​ The risks and uncertainties referred to above include – but are not limited to – risks associated with developing and delivering new functionality for
our service, new products and services, our new business model, our past operating losses, possible fluctuations in our operating results and rate of
growth, interruptions or delays in our Web hosting, breach of our security measures, the outcome of any litigation, risks associated with completed
and any possible mergers and acquisitions, the immature market in which we operate, our relatively limited operating history, our ability to expand,
retain, and motivate our employees and manage our growth, new releases of our service and successful customer deployment, our limited history
reselling non-salesforce.com products, and utilization and selling to larger enterprise customers. Further information on potential factors that could
affect the financial results of salesforce.com, inc. is included in our annual report on Form 10-K for the most recent fiscal year and in our quarterly
report on Form 10-Q for the most recent fiscal quarter. These documents and others containing important disclosures are available on the SEC
Filings section of the Investor Information section of our Web site.
​ Any unreleased services or features referenced in this or other presentations, press releases or public statements are not currently available and may
not be delivered on time or at all. Customers who purchase our services should make the purchase decisions based upon features that are currently
available. Salesforce.com, inc. assumes no obligation and does not intend to update these forward-looking statements.

3. Agenda
​ Best Practices
​ Statistics
​ Problem Solving Funnel
​ Demo
​ Permissions Roadmap
​

4. Standard Profiles
Custom Profiles +
Permission Sets
Multiple Organizations
Best Practices for Using Profiles & Permission Sets
​ Security Progression with Complexity
Increasing # of Users, Processes & Objects

5. ​ Profiles
• Limit One per User
• Baseline authorization
• Page Layout and other user
interface defaults
​ Permission Sets
• Built for layering
• Perfect for role or task-based authorizations
Best Practices for Using Profiles & Permission Sets
​ Division of Labor between Profiles & Permission Sets

6. ​ 7 ​ 1,000​ 20,000
Scale Scope Volume
User Access Cases
per Week (on average)
Employees Salesforce Organizations
Statistics on Salesforce’s Internal Orgs
​

7. Monitr
​ Tool to gather statistics and monitor key “uber” permission

8. User Access Problem Resolution Funnel
​
Missing:
• Data
• Fields
• Bu1on
Reasons:
• New role
• New
feature
Problem
Definitions
Identify
Elements
Check
Access
Isolate &
Iterate
Resolution
• Page Layout
• Object (CRUD)
• Field Level Security
• Apex Class &
Visualforce
Security
• Sharing Rules
• App & System
Permissions
• User & Profile
Comparisons • Permission Set • Login As User
& Verify
• Public Groups

9. Troubleshoot Scenario
​ Who – Robbie Renewals
​ What – He can’t see the “Get Help” action
for his opportunities
​ Why – The “Get Help” Sales team feature
is being extended to Renewals team
​
​ Access issues after a Business Requirement Change

10. Apply Problem Funnel to our Demo
​ Analyze elements the “Get
Help” Custom Action
Use our tools to find
differences between users
Create new
permission set
Login-as
target user
Goal: Happy Users!
Identify Problem
Details
Check Access
Isolate & Iterate
Test

11. Features Roadmap
• Custom Permissions
• Delegated Administration
• Public Group management
• Metadata API
• Session-based Permission Sets
(Developer Preview) –
Summer ’16
• Sobject API updates for Profiles –
Winter ‘17
• Permission Set License auto-assignment –
Winter ‘17
• Permission Set Hierarchy or Grouping
• Lightning Experience for User Management with
Salesforce Einstein
• Delegated Administration
• Queue management
• Application level delegation
​ Permissions and Delegated Administration
Recent Features Longer Term

12. Additional Resources
Where the trail never ends

13. Links to Additional Resources
• Grey Tab chrome extension (search for Grey Tab in Chrome Webstore)
• https://perm-comparator.herokuapp.com
• https://audittrailyo.herokuapp.com
• https://developer.salesforce.com documentation for objects used the highlighted tools
• Profile and Permission Set Object Relationship Diagram
• Profiles API guide
• Permission Sets API guide
• Setup Audit Trail API guide and Salesforce Hacker Blog ( http://www.salesforcehacker.com )
• Recommended Trailhead Modules
• Data Security ( https://trailhead.salesforce.com/module/data_security )
• Identity ( https://trailhead.salesforce.com/trail/identity )
• Event Monitoring ( https://trailhead.salesforce.com/module/event_monitoring )
​

14. Thank Y u

15. Perm Comparator Demo
A Connected App (hosted on Heroku) to
visually compare between profile, permission
set, and/or users

16. Perm Comparator
​

17. Grey Tab Demo
Chrome browser extension to check api access
within the same UI display

18. Grey Tab
​

19. Workbench Demo
Web tool to explore data schema & Rest APIs and
run SOQL queries

20. Workbench
​

21. Audit Trail Yo Demo
A Connected App (hosted on Heroku) to query,
filter and visualize your org’s audit trail

22. Audit Trail Yo
​

23. ​ Users with same role/
job but different
profiles
​ Tools:
• Perm Comparator
• Workbench
​ Multiple users
reporting similar
issues
​ Tools:
• AuditTrailYo
• Workbench
​ Display problems
​ Create Debug Logs
​ Tools:
• Grey Tab
• Workbench
Login-As Comparisons Forensics
3 Troubleshooting Approaches