For example A company has 3,000 Salesforce Enterprise Edition licenses, and they have only one system administrator. The system administrator receives many requests to reset the password, change login hours, unlock users, or change their sharing settings daily. To reduce this, the system administrator can go ahead and set up a delegated administrator, so that any other user who is a delegated administrator can help with the workload. Delegated Administrator’s are users who are given admin-level permissions. The idea to give trusted individuals access to Salesforce to help with the following:
- Create and edit users including password resets, teams and groups.
- Assign users to roles and permission sets
- Unlock/Freeze Users
- Login as a user who has granted login access
- Manage custom objects (i.e.: field labels, values etc.)
When delegating administration, keep the following in mind. Delegated administrators:
- Can’t assign profiles or permission sets with the “Modify All Data” permission
- Don’t see the None Specified option when selecting a role for new users
- Need access to custom objects to access the merge fields on those objects from formulas
- Can’t modify permission sets
- A delegated administration group is a group of users who have the same admin privileges. These groups are not related to public groups used for sharing
Sources:
Delegated Administrators are non admin users who have been assigned some admin privileges and can perform certain admin functions. Delegated administrators can: Create and edit users Unlock users. Assign users to specified profiles. Assign or remove permission sets for users in their delegated groups. Create public groups and manage membership in specified public groups. Log in as a user who has granted login access to the administrator. Manage custom objects and customize nearly every aspect of a custom object. However, Delegated administrators cannot: Assign profiles or permission sets with the “Modify All Data” permission Don’t see the None Specified option when selecting a role for new users Need access to custom objects to access the merge fields on those objects from formulas Can’t modify permission sets Must be assigned the "Manage Roles" permission to change the role of portal account owners
The difference is that delegated administrators have only some of system administrators privileges.
Delegated administrators can perform the following tasks: Creating and editing users and resetting passwords for users in specified roles and all subordinate roles, including setting quotas, creating default opportunity teams, and creating personal groups for those users
- Unlocking users
- Assigning users to specified profiles
- Logging in as a user who has granted login access to their administrator
- Managing custom objects created by an administrator
Here are some useful links :
+1 Shiva
5 answers