Delegated administration allows you to assign limited administrative privileges to users. Its purpose is to relieve the System Administrator of some of his workload. The System Administrator assign a limited admin privileges to one or more users. These delegated administrators can act in addition to the administrator on a part of User Management:
- Creating and editing new users,
- Resetting passwords,
- Unlocking users,
- Assigning roles and permission sets,
- Creating and managing public groups.
They can also manage custom objects and customize nearly every aspect of a custom object
- Managing their tab,
- Creating or editing fields, page layouts, record types,
- Validation rules.
To do this, the System Administrator must create a delegated group, consisting of different components:
- Users who have administrative rights,
- User Management (scope of roles, profiles, and permissions sets they may assign),
- Custom objects that delegate administrators can manage.
NB: The delegate group can be responsible for managing users or managing a custom object independently.
Caution: Giving delegated administration rights for a custom object also gives the ability to delete the object in its entirety.