*This post is locked for comments
Unfortunately it doesn't work. My understanding of assigning security role is like sharing permissions. If the super user doesn't have permission themselves (e.g. Write permission on Account), they can't assign a security role which has this permission. That's what we are facing. Some security roles the Super user needs to assign have Org level write access to Account, Opportunities...
I understand the issue, because it is on the form it needs read access to display these elements. Can you try giving quarter circle permission for company and opportunity? This will provide just read of companies and opportunities that this user owns (which should be none).
Hi Andrew, thanks for you reply. I tried removing permission to Company, Opportunities... these business data entities from the custom User Admin(super user role, copied from System Admin). I set up a user with this role and assign read write license. It is all good except "Insufficient Permission" displays when I try to assign a security role that has access to these entities.
Do you have other ideas? Thanks
Erin
Create a new Security Role call it 'Super User', give it just the permissions required for managing users, assigning roles etc. Leave access to read / write. The trick is preventing the user giving itself Adminitrator role, for that you may need to assign particular roles to a business unit and then give the user access to assign only roles in his/her business unit (may need to play around a bit to get this working).
Stay up to date on forum activity by subscribing. You can also customize your in-app and email Notification settings across all subscriptions.
André Arnaud de Cal... 291,240 Super User 2024 Season 2
Martin Dráb 230,149 Most Valuable Professional
nmaenpaa 101,156