Managed groups

Overview

Before you begin

[!IMPORTANT] - Role permissions: Only System Administrators can access, create, and configure managed groups. - Restriction: A user can belong to only one managed group.

Procedure

1. Create a managed group

1. Go to Setup > Company Settings > Company Security Settings > Delegated Administration.

1. Click New.

1. In the Basic Info section, configure:
   • Group name: Enter a recognizable name, such as South China Limited Administrators.
   • Managed Org Structure: Select the departments that the group can manage in the organization tree.
   • Group members: Add members.
   • Description: Describe the group’s business purpose.
2. Click Save.

2. Configure the managed scope

• Managed objects: Add business objects that group administrators can configure, such as Account and Sales Order.
• Managed processes: Add business flows and approval processes that members can adjust.
• Managed business roles: Add business roles that the group can modify.
• Managed leads pool: Assign the lead pool that the group maintains.

Considerations

• Self-ownership: When a group member creates a custom business object or process, the system automatically adds the asset to that member’s managed group scope.
• Physical boundary: When a managed group member signs in to Setup, the system limits all operations and views, such as the department tree and business role list, to the group’s configured scope.

Expected result

• Regular HR employee Wang Wu belongs to the East China Limited Administrators group, whose managed Org Structure is the East China Sales Department:
  • In Departments and Employees, Wang Wu can view and manage only the East China Sales Department and its child departments. Information about North China, South China, and other departments remains hidden.

Related topics

• Create and assign management roles
• Address book isolation