Delegated administrators in Salesforce are designated users who are given limited administrative
privileges to assist system administrators without having full access to all administrative functions.
The two functions they can typically perform, which align with the permissions available to
delegated admins, are:
Set up users and password management:
Delegated administrators can create and manage user accounts, which includes setting up new users,
resetting passwords, and updating user details.
This is particularly useful for helping with user management tasks without providing full system
administrator access.
Configure updates to sharing rules:
Delegated administrators can manage sharing rules within their specific groups or roles, which helps
control access to records based on criteria set within the organization.
This level of access allows them to modify sharing rules to ensure appropriate data access without
requiring full administrative control over all settings.
The other options listed are not within the scope of delegated administrator capabilities:
Manage custom objects and customize nearly every aspect: Delegated administrators do not have
the ability to manage custom objects or perform extensive customization. These functions are
reserved for system administrators with broader privileges.
Make updates to permission set configurations: Delegated administrators cannot create or modify
permission sets. This is also restricted to full administrators, as it involves controlling access at a
granular level across the org.
By utilizing delegated administrators for user and sharing rule management, organizations can
maintain security and control while also sharing some administrative workload.
Reference: According to Salesforce documentation, delegated administrators have specific
permissions, such as managing users and sharing rules, which support system administrators while
limiting access to high-level customizations and configurations.
