--- schema_version: "1" id: 6707e04ddc994079a105d4c49d5ac91eac7b0bfee61bbcd3e6fcf7ca6ae156dc title: User Roles and Permissions in Salesforce Spiff collection: admin version: current locale: en-us portal_url: https://docs.salesforce.com/admin/current/en-us/sales/264-0-0/spiff_users_roles_and_permissions.md canonical_url: https://help.salesforce.com/s/articleView?id=sales.spiff_users_roles_and_permissions.htm&release=264.0.0&type=5 source_site: help.salesforce.com content_type: documentation content_hash: 9ccd5467907db3287f7c5d6027d8f9a7e28160d9f52f58c33ad9d066109434cf description: Give users the appropriate level of access so they can be successful in Salesforce Spiff, and enforce the principle of least privilege. Assign a default role to each user, or create custom roles with access to specific Spiff functionality. products: - Sales Cloud - Sales Enablement release: "264" --- # User Roles and Permissions in Salesforce Spiff Give users the appropriate level of access so they can be successful in Salesforce Spiff, and enforce the principle of least privilege. Assign a default role to each user, or create custom roles with access to specific Spiff functionality. ### Required Editions
Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience
Available in: Enterprise, Unlimited, and Developer Editions
Available for an additional cost in: Professional Edition with Web Services API Enabled
## Default Roles Spiff provides these default roles for users. | Role | API Name | Users Can... | | --- | --- | --- | | Company Admin | company\_admin | Access all functionality in Spiff. | | Finance | finance | View and edit most incentive compensation records such as reports, statements, quotas, documents, approvals, and overwrites. The user can access Designer, but has limited editing permission for admin settings and connectors. | | Editing Manager | editing\_manager | View most data sources, reports, statements, documents, approvals, and overwrites. But, they can’t access Designer and they have other limited editing permissions. | | Manager | manager | View most reports, statements, quotas, documents, and approvals. But, they can’t access Designer and they have limited editing permissions. | | Representative | representative | View basic incentive compensation records such as statements, quotas, documents, and approvals. But, they can’t access Designer and they can edit comments only. | | IT Support | it\_support | Manage single sign-on (SSO), OAuth integrations, and connectors. But, they have limited view permission for most other records in Spiff. They can’t access Designer. | | Deactivated | deactivated | Not access any functionality in Spiff, but Spiff still generates and calculates statements until their team assignment's Effective Until date expires. See [Team Management in Salesforce Spiff](https://help.salesforce.com/s/articleView?id=sales.spiff_teams_management.htm&release=264.0.0&type=5 "Teams are an important component of commission plans. Sometimes team members receive commissions based on the entire team's performance, and managers receive commissions based on a team's performance, or even multiple teams. You can assign members to a team for a limited period by defining the start and end dates for the assignment. Teams can also be assigned team leads who can view the team members’ statements. When creating a variable for multiple plans, you can use custom fields in numerous plans and customize the value uniquely for each team."). | To view the specific permissions included in each default role, select a role from the Role Management page in the Admin menu. This page is available only to users with one of these privileges. - The default Company Admin role - A custom role with the Users: Edit permission turned on This page also shows the number of users assigned to each role, who created or updated each role, and when each role was last modified. If you import user records, specify the API name of a default role for each user in the record upload template. You can’t specify a custom role when you import user records. See [Import Users in Salesforce Spiff Manually](https://help.salesforce.com/s/articleView?id=sales.spiff_users_add_manual_import.htm&release=264.0.0&type=5 "Admins can manually import users in Salesforce Spiff by downloading, modifying, and uploading a template .csv file. You can also add other admins."). ## Manager Role versus Team Lead Team lead isn’t a unique role in Spiff. You can assign any Spiff role as a lead from the Teams page. A user with the manager role doesn’t have to be a team lead. A team lead can create rollup opportunities, which filter ‌deals for all reps on the same team as the team lead. You can create commission rules that use rollup filters for giving a team lead a percentage of their team’s performance. A team lead can see this data for team members. - Statements, with the ability to trace, make comments, and export and other optional restrictions - Documents signed through Spiff - Tickets, with the ability to resolve - Quotas The manager role grants access to shared reports, standard reports, and shared reporting dashboards. Managers can see reporting statistics for other reps only if they have visibility into those statements. Manager visibility depends on team lead status, not the manager role. ## Custom Roles To assign a role with a custom mix of permissions, create a custom role using a default role as a starting point. See [Create a Custom Role in Salesforce Spiff](https://help.salesforce.com/s/articleView?id=sales.spiff_users_roles_custom.htm&release=264.0.0&type=5 "Fine-tune access for incentive compensation plans and give stakeholders control of specific Salesforce Spiff functionality. If a default Spiff role doesn’t provide the appropriate permissions for a user, create a custom role using a default role as a starting point."). Custom roles have these limitations. - You can’t delete a custom role. - After you create a custom role, wait up to two minutes before you can assign the new role to a user. After you edit a custom role that’s assigned to a user, wait up to two minutes before the user’s account reflects the changed permissions. - When you import user records from another source, you can specify custom roles when you import users manually, upload users with the object API, or sync user records with a webhook. If you use the Salesforce connector to import users, all users have the default Representative role assigned. You can later update roles manually from the Role Management page. ## Non-Admin User Seats From the Admin menu, the Users page shows the number of non-admin user seats, which are licensed users who don’t have Spiff admin privileges. This number is calculated by counting the unique users with active plan assignments and who have statements generated during the current statement period. For example, if ten statements are generated during the month but those statements belong to five unique users, the number of non-admin user seats is five. ![Non-admin users shown on the Users page](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-sales-sales_performance_management-264-0-0-production-enus/b1f2feb4-26b8-444f-97f7-be2349869d93/sales_performance_management/images/spiff/spiff_users_non_admin.png) #### See Also - [Import Users in Salesforce Spiff Manually](https://help.salesforce.com/s/articleView?id=sales.spiff_users_add_manual_import.htm&release=264.0.0&type=5 "Admins can manually import users in Salesforce Spiff by downloading, modifying, and uploading a template .csv file. You can also add other admins.") - [Adding Salesforce Spiff Users with No Salesforce License](https://help.salesforce.com/s/articleView?id=sales.spiff_connector_salesforce_license.htm&release=264.0.0&type=5 "When you use the Salesforce connector in Salesforce Spiff, you can add Spiff users who don't have a Salesforce license or who don't share your company's email domain.") - [Add a Salesforce Connector](https://help.salesforce.com/s/articleView?id=sales.spiff_connector_add.htm&release=264.0.0&type=5 "To sync data from Salesforce with Salesforce Spiff, add a connector. You can set up connectors for up to five Salesforce orgs.") - [Set Up a Third-Party Connector in Salesforce Spiff](https://help.salesforce.com/s/articleView?id=sales.spiff_connector_third_party_setup.htm&release=264.0.0&type=5 "Salesforce Spiff REST API or a webhook processes all automated third-party data imported into Spiff. Send data to Spiff REST API or webhook endpoints directly or use an Integration Platform as a Service (iPaaS) tool, such as Workato. Workato provides a default Spiff connector that uses webhook endpoints for integrating third-party data with Spiff more easily. To purchase the Workato connector, contact your Salesforce account executive or sales partner. You can also use another iPaaS tool or design a custom solution.") - [_Salesforce Developers_: Spiff Object API](https://developer.salesforce.com/docs/sales/spiff/references/spiff-object-api-reference)