salesforce_security_impl_guide

More documents

Recommendations

Info

Securing and Sharing Data Viewing and Editing Login Hours in the Enhanced Profile User Interface Viewing and Editing Login Hours in the Enhanced Profile User Interface For each profile, you can specify the hours when users can log in. 1. From Setup, click Manage Users > Profiles. 2. Select a profile and click its name. 3. In the profile overview page, scroll down to Login Hours and click Edit. 4. Set the days and hours when users with this profile can log in to the organization. To allow users to log in at any time, click Clear all times. To prohibit users from using the system on a specific day, set the start and end times to the same value. If users are logged in when their login hours end, they can continue to view their current page, but they can’t take any further action. EDITIONS Available in: • Enterprise • Performance • Unlimited • Developer • Database.com USER PERMISSIONS Note: The first time login hours are set for a profile, the hours are based on the organization’s Default Time Zone as specified in Setup at Company Profile > Company Information. After that, any changes to the organization’s Default Time Zone won’t change the time zone for the profile’s login hours. As a result, the login hours are always applied at those exact times even if a user is in a different time zone or if the organization’s default time zone is changed. Depending on whether you’re viewing or editing login hours, the hours may appear differently. On the Login Hours edit page, hours are shown in your specified time zone. On the profile overview page, they appear in the organization’s original default time zone. To view login hour settings: • “View Setup and Configuration” To edit login hour settings: • “Manage Profiles and Permission Sets” Viewing and Editing Login Hours in the Original Profile User Interface For each profile, you can specify the hours when users can log in. 1. From Setup, click Manage Users > Profiles, and select a profile. 2. Click Edit in the Login Hours related list. 3. Set the days and hours when users with this profile can use the system. To allow users to log in at any time, click Clear All Times. To prohibit users from using the system on a specific day, set the start and end times to the same value. If users are logged in when their login hours end, they can continue to view their current page, but they can’t take any further action. 4. Click Save. Note: The first time login hours are set for a profile, the hours are based on the organization’s Default Time Zone as specified in Setup at Company Profile > Company Information. After that, any changes to the organization’s Default Time Zone won’t change the time zone for the profile’s login hours. As a result, the login hours are always applied at those exact times even if a user is in a different time zone or if the organization’s default time zone is changed. Depending on whether you're viewing or editing login hours, the hours may appear differently. On the profile detail page, hours are shown in your specified time zone. On the Login Hours edit page, they appear in the organization's default time zone. EDITIONS Available in: • Enterprise • Performance • Unlimited • Developer • Database.com USER PERMISSIONS To set login hours: • “Manage Profiles and Permission Sets” 44
Securing and Sharing Data Managing Salesforce Classic Permissions Managing Salesforce Classic Permissions A mobile license is required for each user who will access the full version of the Salesforce Classic app. You allocate mobile licenses using the Mobile User checkbox on the user record. For organizations using Unlimited, Performance, and Developer Editions, <strong>salesforce</strong>.com provides a mobile license for each Salesforce license and the Mobile User checkbox is enabled by default for all users. Organizations using Professional or Enterprise Editions must purchase mobile licenses separately and allocate them manually. Note: The Mobile User checkbox is disabled by default for new Performance Edition users. To prevent users from activating the full version of Salesforce Classic on their mobile devices before you’re ready to deploy the app, disable the Mobile User checkbox for all your users. Any Salesforce user who doesn't have a mobile license can download a free, restricted version of Salesforce Classic. Starting with Summer ‘13, the free version of Salesforce Classic is disabled by default in all new organizations. You can enable it to give users access to Salesforce on their mobile devices. To enable the free version of Salesforce Classic: 1. From Setup, click Mobile Administration > Salesforce Classic > Settings. 2. Click Edit. 3. Select Enable Mobile Lite . 4. Click Save. EDITIONS Free version available in: All editions except Database.com Full version available in: Performance, Unlimited, and Developer Editions, and for an additional cost in: Professional and Enterprise Editions USER PERMISSIONS To view Salesforce Classic configurations: • “View Setup and Configuration” To create, change, or delete Salesforce Classic configurations: • “Manage Mobile Configurations” Organization-Wide Sharing Defaults Overview Organization-wide sharing settings specify the default level of access to records and can be set separately for accounts (including assets and contracts), activities, contacts, campaigns, cases, leads, opportunities, calendars, price books, and custom objects. For most objects, organization-wide sharing settings can be set to Private, Public Read Only, or Public Read/Write. In environments where the organization-wide sharing setting for an object is Private or Public Read Only, an administrator can grant users additional access to records by setting up a role hierarchy or defining sharing rules. However, sharing rules can only be used to grant additional access—they cannot be used to restrict access to records beyond what was originally specified with the organization-wide sharing defaults. EDITIONS Available in: Professional, Enterprise, Performance, Unlimited, Developer, and Database.com Editions. Customer Portal is not available in Database.com Important: If your organization uses a Customer Portal, before you enable contacts to access the portal, set the organization-wide sharing defaults on accounts, contacts, contracts, assets, and cases to Private. This ensures that by default your customers can view only their own data. You can still grant your Salesforce users Public Read/Write access by creating sharing rules in which all internal users share with all internal users. By default, Salesforce uses hierarchies, like the role or territory hierarchy, to automatically grant access of records to users above the record owner in the hierarchy. 45
Page 1 and 2: Security Implementation Guide Versi
Page 3 and 4: CONTENTS Chapter 1: Security Overvi
Page 5 and 6: Contents Editing Lead Sharing Rules
Page 7 and 8: CHAPTER 1 Security Overview Salesfo
Page 9 and 10: Security Overview User Security Ove
Page 11 and 12: Security Overview Custom Permission
Page 13 and 14: Security Overview CAPTCHA Security
Page 15 and 16: Security Overview Auditing • Role
Page 17 and 18: Securing and Sharing Data Revoking
Page 19 and 20: Securing and Sharing Data Viewing P
Page 21 and 22: Securing and Sharing Data Cloning P
Page 23 and 24: Securing and Sharing Data App and S
Page 25 and 26: Securing and Sharing Data Working w
Page 27 and 28: Securing and Sharing Data Enable Cu
Page 29 and 30: Securing and Sharing Data Assigning
Page 31 and 32: Securing and Sharing Data Creating
Page 33 and 34: Securing and Sharing Data Editing P
Page 35 and 36: Securing and Sharing Data Searching
Page 37 and 38: Securing and Sharing Data Enable Cu
Page 39 and 40: Securing and Sharing Data Object Pe
Page 41 and 42: Securing and Sharing Data Comparing
Page 43 and 44: Securing and Sharing Data Setting F
Page 45 and 46: Securing and Sharing Data Working w
Page 47 and 48: Securing and Sharing Data Setting L
Page 49: Securing and Sharing Data Restricti
Page 53 and 54: Securing and Sharing Data External
Page 55 and 56: Securing and Sharing Data Disabling
Page 67 and 68: Securing and Sharing Data Editing L
Page 69 and 70: Securing and Sharing Data Editing C
Page 71 and 72: Securing and Sharing Data Editing C
Page 73 and 74: Securing and Sharing Data Sharing R
Page 75 and 76: Securing and Sharing Data User Shar
Page 77 and 78: Securing and Sharing Data Sharing U
Page 81 and 82: Securing and Sharing Data Viewing A
Page 83 and 84: Securing and Sharing Data Granting
Page 85 and 86: Configuring Salesforce Security Fea
Page 95 and 96: CHAPTER 4 Enabling Single Sign-On S
Page 97 and 98: Enabling Single Sign-On • Before
Page 99 and 100: Monitoring Your Organization's Secu
Page 101 and 102:
Monitoring Your Organization's Secu
Page 103 and 104:
Page 105 and 106:
Page 107 and 108:
Security Tips for Apex and Visualfo
Page 109 and 110:
Page 111 and 112:
Page 113 and 114:
INDEX A Access about 10 revoking 11
Page 115 and 116:
Index Profiles (continued) object p
show all

salesforce_security_impl_guide

Create successful ePaper yourself

Delete template?

Save as template?