---
schema_version: "1"
id: 043600ed623a36d597c63fa40e2b4131ad35cb2ec49f9e389ef650e1dfdb3c77
title: Guidance for Administrators on the Own Government Cloud Platform
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/platform_o_fedramp_guidance_for_admins.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.platform_o_fedramp_guidance_for_admins.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 40f02e467633c05b227151cd63fbb891acf576d0fcf17b8bfb64266384a84948
description: Understand the types of privileged administrator roles that are available in the Own Government Cloud platform. Use best practices to assign appropriate admin roles to users. Learn how to disable, delete, or swap administrator accounts when necessary.
products:
  - Security
  - Salesforce Platform
release: "264"
---
# Guidance for Administrators on the Own Government Cloud Platform

Understand the types of privileged administrator roles that are available in the Own Government Cloud platform. Use best practices to assign appropriate admin roles to users. Learn how to disable, delete, or swap administrator accounts when necessary.

## Best Practices for Operating Administrator Accounts

As you create a plan for assigning privileged administrator roles, keep these recommendations in mind:

- Establish usage conditions for Master Administrator accounts and other privileged user accounts. To maintain security and operational integrity, use these accounts strictly for administrative tasks. For day-to-day tasks that don't require elevated privileges, use non-administrative accounts.
- Employ the principle of least privilege by assigning the minimum administrative permissions necessary to accomplish assigned tasks in accordance with mission and business need.
- Segregate duties by using roles, business units, and other permissions.
- Periodically review permissions assigned to administrative users to validate the necessity for such permissions.
- Regularly audit and review entries within the Audit Log to track changes made by administrators and other privileged users. Look for unexpected or suspicious activity and logins.

- **[Administrator Roles in Own Government Cloud](https://help.salesforce.com/s/articleView?id=platform.platform_o_fedramp_admin_roles.htm&release=264.0.0&type=5)**  
    See what actions privileged administrative users can take in each role.
- **[Configure and Delete Admin Accounts in Own Government Cloud](https://help.salesforce.com/s/articleView?id=platform.platform_o_fedramp_guidance_configure_admin_accounts.htm&release=264.0.0&type=5)**  
    Master Administrators can disable or delete user accounts, export a CSV file of all user accounts, or swap the Master Admin user.