Security Modal

What is Profile ?

A Profile is a group/collection of a settings and permissions that define what a user can do in salesforce.
A profile controls Object permissions, Field permissions, User permission, Tab settings, App settings. Apex class access, Visualforce page access, Page Layouts, Record Types, Login hours & Login IP ranges.
You can define profles by user's job function, For Example : System Administrator, Developer, Sales Representative.
A Profile can be assigned to many users, but user can be assigned a single profile at a time

What does a Profile Control ?

1) Page Layout :

Which page layout the user has to see.

2) Field Level Security :

Using Field level security we can restrict user to Create, Read, Edit and Delete fields

3) Custom Apps :

Which standard and custom apps the user can view

4) Tabs :

Which tabs the user can view

5) Record Types :

Which record types are available to users.

6) Login :

Login IP and Salesforce login Hours restrictions can be made it users.

Different Profiles in Salesforce ?

There are two types of Profiles in Salesforce. 1) Standard Profiles. 2) Custom Profiles.

1) Standard Profiles :

Standard Profiles in salesforce are defaultly created with force.com which can not be renamed or deleted.
Standard Profiles which are used most frequently in SFDC are.

1) System Administrator :

System Administrator is the super user and can customize every applications in an organization.

2) Standard User :

Standard user can view, Edit and Delete their own records

3) Read Only :

Can only view records.

4) Solution Manager :

Solution Manager can customize standard user permissions, published solutions and solutions categories.

5) Marketing User :

Marketing user can import organization lead and have all standard user permissions

2) Custom Profiles :

Custom Profiles in Salesforce are defined by user. These profiles can be edited and deleted.

What is Permission Set ?

There are two types of Profiles in Salesforce. 1) Standard Profiles. 2) Custom Profiles.

1) Standard Profiles :

             Standard Profiles in salesforce are defaultly created with force.com which can not be renamed or deleted.
     Standard Profiles which are used most frequently in SFDC are.
    1) System Administrator :               System Administrator is the super user and can customize every applications in an organization.
     2) Standard User :             Standard user can view, Edit and Delete their own records            3) Read Only :              Can only view records.
      4) Solution Manager :               Salution Manager can customize standard user permissions, published solutions and solutions categories.
       5) Marketing Uesr :                  Marketing user can import organization lead and have all standard user permissions

2) Custom Profiles :         Custom Profiles in Salesforce are defined by user. These profiles can be edited and deleted.

What is Permission Set ?

Permission Sets are a collection of permissions that can extend a user’s functional access beyond what their profile allows. They are used to grant additional access without changing the profile.Permission Sets in salesforce extends users functional access without changing their profile. It is a Collection of Settings and Permissions.

Diffrence between Profiles and Permission Sets in Salesforce

Every Single user will have only one profile but using permission sets a user will have multiple permission sets and a zero permission set.

Example :

There is a Profile system administrator and two users like user1 and user2 will have their same profile. We have a requirement that User1 must have access to marketing app.
If we have the same profile for both user. the marketing app is accessible for both users. But in our Requirement User1 must only access Marketing App.
Hare Creating new profile and assigning to User1 is not a solution because we can create and manage to many profile in Salesforce. Hare a concept Permission Set will come in to picture. We have to create new permission set and assign it to the User1

Who is a user in Salesforce ?

User is a persion who have credentials to log-in to Salesforce and use the Application.By Default every user in salesforce will have a user account. The User account identifies the user and the settings determinse it's features.
Each User account contains at least the following :
-> User Name : 2) Email Address : 3) User's First and Last Name : 4) License : 5) Profile : 6) Role(Optional) :

What is Roles in Salesforce

Roles in Salesforce define the level of visibility a user has into the organization's data.Roles are used to implement record-level security by creating a hierarchy for sharing access.
Data visibility is also dependent on the organisation-wide defaults, which is set as a baseline for vertical data sharing.Sharing rules are used to extends the access we receive form roles.

What is Security Modal

The Salesforce Security Model is designed to protect data and ensure that only authorized users can access it. It provides a comprehensive and flexible data security framework to secure data at various levels. 1) Organization Lavel : 1) Password Policies : 2) Mantnaince Authorization User : 3) Limit IP Address : 2) Object Level : 1) Profile & Permission Set3) Field Level : 1) Profile & Permission Set (View,Create, Edit)4) Record Level : 1) OWD (Organization wide Default) 1) Private : Only Owners can view/ access their records. not others Note : admin can see all user records 2) Public Read Only : Everyone can view otheres records. but can not edit/create them. only owners have full access. 3) Public Read/Write/Transfer : Everyone can read/edit others as well as their own records 2) Roles Hierarchy : 3) Sharing Rules : Extend access beyond OWD and Role Hierarchies. 1) Owner-Based Sharing Rules: Share records owned by specific users or roles. 2) Criteria-Based Sharing Rules: Share records that meet certain conditions (e.g., all accounts where Industry = Healthcare).
4) Menual Sharing : 5) Apex Sharing : • Use Apex code for complex, programmatic sharing logic. • Example: Automatically share a case with the support team if the Priority = High.

If OWD is set to privete then how to share the records

There are three way we can share the records 1) Role Hierarchy : 2) Sharing Rules : 3) Manual Sharing :