Definition
Delegated Administration is a Salesforce administration feature that helps system administrators configure, secure, and maintain their org. It provides control over how the platform behaves and how users interact with data and functionality.
Real-World Example
Consider a scenario where an admin at Redwood Financial is working with Delegated Administration to ensure the Salesforce org runs smoothly and securely. They configure Delegated Administration during a scheduled maintenance window, test it in a sandbox first, and then deploy to production. The result is tighter security and a more streamlined experience for all 200 users in the org.
Why Delegated Administration Matters
Delegated Administration in Salesforce allows System Administrators to grant specific administrative privileges to non-admin users without giving them the full System Administrator profile. Through delegated admin groups configured in Setup, administrators can designate users who can create and edit users within specified roles, manage custom objects, reset passwords, assign permission sets, and perform other bounded administrative tasks. This decentralizes routine admin work while maintaining security by ensuring delegated admins only have access to the specific operations and user populations they need to manage.
As organizations grow beyond a handful of administrators, delegated administration becomes essential for operational efficiency and security. A company with 2,000 users across five business units cannot have every password reset, user creation, and permission change funnel through two System Administrators without creating a bottleneck. By setting up delegated admin groups for each business unit's team lead or operations manager, routine tasks like onboarding new hires, resetting passwords, and modifying custom object data can be handled locally. Without delegated administration, organizations either overload their admin team or resort to granting full System Administrator access to more users than necessary, creating a significant security risk.
How Organizations Use Delegated Administration
- Redwood Financial — Redwood Financial set up delegated administration for their five regional managers, each responsible for onboarding and managing users within their branch's role hierarchy. Regional managers can create users, assign pre-approved permission sets, and reset passwords for their team without accessing org-wide settings, reducing admin team tickets by 60%.
- Coastal Healthcare — Coastal Healthcare's department heads are delegated admins who can manage users within their department's role and create records on department-specific custom objects. This allows the nursing director to onboard new nurses and assign them to the correct queues without submitting a request to the central IT team, cutting onboarding time from three days to same-day.
- Summit Enterprises — Summit Enterprises uses delegated administration to empower their help desk team to reset passwords and unlock accounts for the 1,500-person sales force. The help desk agents have no access to setup, reports, or data exports. They can only perform password resets for users within the Sales role hierarchy, handling 95% of access requests without escalating to the two System Administrators.