25 January 2013

Delegating Modify All Data

Yesterday's post on what Modify All Data can actually do generated a brief, but important, twitter thread with Andy Ognenoff (@aognenoff) and Matt Brown (@mattybme) that I'd like to talk about today.

I spend more time talking through Modify All Data than any of the other one hundred thirty some odd user permissions. Yesterday's blog was meant to highlight all of the ways it's overloaded to provide access to data and other things.

An even better way to think of it is that Modify All Data equal System Administrator. While that's not 100% true, it's the way people often think of it. As a result, it now means access to all data, as well as the ability to migrate metadata, create sandboxes, and write apex code. And that's not even all of the permissions that are required when you enable Modify All Data like View Setup and Configuration. In other words, it really means more than it probably should.

There is some hope here. We created a set of object permissions a long time ago called Modify All and View All records. Interestingly enough, these permissions were the original intent of Modify All Data in that all they are really designed to do is ignore sharing for that object - nice and simple. There are some other behaviors tied to these permissions like the ability to unlock records locked due to a workflow approval, but for the most part they were designed to offload some of the need for administrators to assign Modify All Data. For instance, rather than assign Modify All Data to grant access to all Accounts and Contacts, just grant Modify All on Accounts and Contacts.

Another example that comes up a lot with customers I talk with is login-as. Modify All Data is only one way to login-as another user, another is to use Delegated Administration which allows a user with only View Setup and Configuration permission who is assigned to a Delegated Administration group to login as a user in a specific branch of the role hierarchy.

We have discussed all of the other permissions we need to create to provide alternatives to granting Modify All Data and here is where you can help. If you have suggestions of what's most important to you, please let us know, whether its through a comment on this blog, on twitter with the #askforce or #salesforce hash tag, or by participating on the ideaexchange. Your needs will help us prioritize which portions are more important than others. Andy gave me a great example with dashboard management - what's yours?


  1. Nhạc Thành nhìn thấy sắc mặt của mọi người thì móc ra hơn mười viên đan dược tam phẩm.

    - Ta đã đi theo Nhạc Thành sư huynh thì về sau cũng không sợ những học viên cũ kia khi dễ.

    Một thanh sađồng tâm
    game mu
    cho thuê phòng trọ
    cho thuê phòng trọ
    nhac san cuc manh
    tư vấn pháp luật qua điện thoại
    văn phòng luật
    số điện thoại tư vấn luật
    dịch vụ thành lập doanh nghiệpm thanh niên tiến lên nói, sau đó hắn cầm lấy một viên đan dược không hề dơ dự nhét vào miệng.

    - Ngươi tên là gì?

    Nhạc Thành đối với thanh sam thanh niên này cũng hơi ấn tượng.

    - Nhạc Thành sư huynh, ta tên là Quách Dương.

    Thanh sam thanh niên cất tiếng nói.

    - Ta cũng đi theo Nhạc Thành sư huynh.

    Nhìn thấy Quách Dương nuốt đan dược, một số người cũng cầm đan dược nhét vào miệng.

  2. Rapid responses are electronic comments to the editor. A rapid response is first posted online. If you need the URL (web address) of an individual response, simply click on the response headline and copy the URL from the browser window. If the player is looking to make one $200 wager on the Superbowl and then withdraw it does not matter how reduced the juice is if they are going to pay $15 to process the payout. Many books will charge players for small money transfers since they target the larger player with other perks. The small superbowl bettor is better off at a book that charges full price but has free withdrawals yet charges full vig.. (tags: Cheap Real Yeezys, Discount Jordan Shoes Wholesale, Cheap Yeezys)

    Enjoy a unique stay in a very distinctive city, where beguiling vacation homes range from an elegant penthouse on the site of the old brewery to quaint private bed and breakfast suites in the heart of the French Quarter. Choose an 8 bedroom house for your wedding or reunion, a stylish condo in the Quarter or, for a racy history, stay in a B that once housed an infamous bordello and welcomes guests with extraordinary concierge services. Rentals are within walking distance. (tags: Coach Outlet Store Online , Michael Kors Bags Sale, Coach Outlet Store, MK Outlet)

    Wedbush analyst Ives said how well it is received will boil down to execution and comfortable consumers feel around Facebook and cryptocurrency. Be sure, recent history reminds us that many big Facebook announcements never really take off. Such AR applications remain all but invisible today (tags: Jordan Shoes For Sale Cheap, 2020 Jordan Release Dates, Ray Ban Sunglasses Outlet).

  3. You will agree with me that women are generally synonymous to fashion. And one of the fashion Coach Handbags Clearance that women adore so much when they want to look fashionable and thus look beautiful, is fine looking attractive and quality New Air Jordan Shoes. Thus, in as much as women love putting on quality fine looking Cheap Air Force Ones, research has confirmed that women just don't throw money around like their opposite counterpart, so quality fine looking MK Outlet they prefer, but they also prefer buying them cheap. An increasing number of people these days are finicky about the kind of Air Jordan Sale they wear. While almost everyone wants to wear the latest Michael Kors Factory Outlet and trendiest Cheap Yeezys not many are prepared to shell out exorbitant amounts of money for these. Therefore, if you want to know insider secrets to buy cheap Coach Factory Outlet Online read on to know more. (Article Source From Coach Outlet Clearance Sale)

  4. This comment has been removed by the author.

  5. So precious and age-worth update you made here for the tech and program fans and lovers. Of course in many cases we need to modify our data in our data base or in other data resources. But modifying data is not always an easy task. But diving the deep into your well-organized writing , I found so many important focuses that might be known by all. I appreciate your conducive contribution. Just one query, what if all data are lost from any device or drive? How to recover it without any loss? In this situation i can recommend Data recovery melbourne that is an unique platform can help recover your data with 100% success.