Jason can log in now. But what can he actually do once he's in? Can he create accounts? Delete them? That's decided by his profile.
What a profile is
Every user has exactly one profile, tied to their user license. It sets their defaults:
- which apps and tabs they see
- which page layouts and record types they get
- what they're allowed to do with records
Salesforce comes with standard profiles, like Standard User and System Administrator.
Object permissions
For each kind of record, like Accounts, a profile says whether users can:
| Permission | Jason, on Accounts |
|---|---|
| Create | Yes |
| Read | Yes |
| Edit | Yes |
| Delete | No |
Two special permissions, View All Data and Modify All Data, override sharing. Keep them for system administrators.
Cloning a profile
You can't change object permissions on a standard profile. So Jay clones one:
- In Setup, open Profiles.
- Find Standard User and click Clone.
- Name it Peakline Sales and save.
- Edit the copy, turn off Delete on Accounts, and assign it to Jason.
Recap
- Every user has one profile.
- It sets their defaults and what they can do with each kind of record.
- You can't change object permissions on standard profiles, so clone one and edit the copy.
Now you try
In your org, open Profiles, clone Standard User, and name it Peakline Sales. Reply DONE in the video's comments, or STUCK and say where.