---
schema_version: "1"
id: 9d2055c9fe03dc279cd3c5c67345da4cd7c9f9b72edecec6ae8b1046379decef
title: Delegate Administrative Duties
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/admin_delegate.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.admin_delegate.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: f3b5ccd00417fc27615a7c8906ce6095bc12708e8f347299acd909a8536bd286
description: Use delegated administration to assign limited admin privileges to users in your org who aren’t administrators. For example, let’s say you want the Customer Support team manager to manage users in the Support Manager role and all subordinate roles. Create a delegated admin for this purpose so that you can focus on other administration tasks.
products:
  - Security
  - Salesforce Platform
release: "264"
---
# Delegate Administrative Duties

Use delegated administration to assign limited admin privileges to users in your org who aren’t administrators. For example, let’s say you want the Customer Support team manager to manage users in the Support Manager role and all subordinate roles. Create a delegated admin for this purpose so that you can focus on other administration tasks.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: both Salesforce Classic and Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, <strong>Unlimited</strong>, <strong>Developer</strong>, and <strong>Database.com</strong> Editions</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
      <colgroup>
        <col style="width:50%">
        <col style="width:50%">
      </colgroup>
      <thead class="slds-text-title_caps ">
        <tr class="">
          <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d59564e73">User Permissions Needed</th>
        </tr>
      </thead>
      <tbody>
        <tr class="">
          <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d59564e73 ">To manage delegated administration:</td>

          <td class="slds-cell-wrap" style="vertical-align:top;" headers="d59564e73 ">Customize Application</td>

        </tr>
        <tr class="">
          <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d59564e73 ">To be a delegated administrator:</td>

          <td class="slds-cell-wrap" style="vertical-align:top;" headers="d59564e73 ">View Setup and Configuration</td>

        </tr>
      </tbody>
    </table>

Delegated administrators can:

- Create and edit users in specified roles and all subordinate roles. User editing tasks include resetting passwords, setting quotas, creating default opportunity teams, and creating personal groups for those users.
- Unlock users.
- Assign users to specified profiles.
- Assign or remove permission sets for users in their delegated groups.
- Assign or remove permission set groups for users in their delegated groups.
- Create public groups and manage membership in specified public groups.
- Log in as a user who has granted login access to the administrator.
- Manage custom objects and customize nearly every aspect of a custom object. However, a delegated admin can’t create or modify relationships on the object or set org-wide sharing defaults.
- Administer users across all delegated groups to which the delegated admin is assigned. For example, Sam Smith is specified as a delegated administrator in two delegated groups, Group A and Group B. Sam can assign a permission set or public group from Group A to users in Group B.
- Create, edit, and delete field sets in Salesforce Classic even if the delegated admin isn’t assigned the Customize Application permission.
- Create, edit, and delete records in a custom metadata type.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/images/icon_note.png)

Note When delegating administration, keep the following in mind. Delegated administrators:

- Can’t assign profiles or permission sets with the Modify All Data permission
- Don’t see the None Specified option when selecting a role for new users
- Need access to custom objects to access the merge fields on those objects from formulas
- Can’t modify permission sets
- Must be assigned the Manage Roles permission to change the role of portal account owners
- Can’t activate or deactivate users that have the Modify All Data permission assigned.
- Retain all privileges from their assigned user permissions, as permissions are additive and being a delegated administrator doesn’t restrict access granted elsewhere. For example, if a delegated administrator is granted the Manage Users or Customize Application permissions, that user can perform actions outside the scope that they’re allowed as a delegated administrator.

To delegate administration of particular objects, use object permissions, such as “View All Records” and “Modify All Records,” instead.

#### See Also

- [Define Delegate Administrators](https://help.salesforce.com/s/articleView?id=platform.delegating_user_administration.htm&release=264.0.0&type=5 "Enable delegated administrators to manage users in specified roles and all subordinate roles. You can assign specified profiles to those users, and log in as users who have granted login access to administrators. A delegated administration group is a group of users who have the same admin privileges. These groups are not related to public groups used for sharing.")