---
schema_version: "1"
id: 764d8c6389cdfdb48e4e8c8d1d492a255188b3f286e693eb76d38c9e54c9746e
title: Configure Delegated Access Automation
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/sfdo/264-0-0/ec_configure_delegated_access_automation.md
canonical_url: https://help.salesforce.com/s/articleView?id=sfdo.ec_configure_delegated_access_automation.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 407cfb79eab77517a40d6f628d4b86acdfb09c224af4277b2a37725d31bb615f
description: Automate the access delegation lifecycle with record-triggered flows and scheduled flows. The flows create delegated users and contact-contact relationships from access requests, keep request records in sync when proxy users sign up or are deactivated, and identify access delegation requests that require updates.
products:
  - Education
release: "264"
---
# Configure Delegated Access Automation

Automate the access delegation lifecycle with record-triggered flows and scheduled flows. The flows create delegated users and contact-contact relationships from access requests, keep request records in sync when proxy users sign up or are deactivated, and identify access delegation requests that require updates.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small " summary="Required Editions"><caption>Required Editions</caption> <colgroup><col style="width:100%"></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, <strong>Unlimited</strong>, and <strong>Developer</strong> Editions with Education Cloud</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:left;vertical-align:top;" id="d139064e78">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d139064e78 ">To configure flows:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d139064e78 ">Education Cloud Full Access permission set</td>

          </tr>
        </tbody>
      </table>

To configure record triggered and scheduled flows for delegated access:

1. Clone and activate the Create Delegated User and Contact-Contact Relation record-triggered flow. If a contact exists with the email address that the student provided during proxy onboarding, but doesn't have a user record, the flow creates a user record. The flow also creates a contact-contact relationship if one doesn’t already exist.
    1. From Setup, in the Quick Find box, enter _Flows_, and then select **Flows**.
    2. Select **Create Delegated User and Contact-Contact Relation**.
    3. Click **Save As New Flow**.
    4. Enter a name and API name for the new flow.
    5. In the Create User element, configure the field values and conditions for creating a delegated user.
    6. In the Send Email to Delegated Contact element, configure the email body with the sign-up URL for the proxy portal to send a sign-up email to the specified email address.
    7. Save and activate the flow.
2. Clone and activate the Update Access Delegation Requests on Proxy Signup record-triggered flow. The flow keeps access delegation requests in sync with the proxy user’s lifecycle. When a proxy user signs up, the flow changes related requests with a status of Pending to New. When the proxy user is deactivated, the flow changes related active requests to Revoke Requested.
    1. From Setup, in the Quick Find box, enter _Flows_, and then select **Flows**.
    2. Select **Update Access Delegation Requests on Proxy Signup**.
    3. Click **Save As New Flow**.
    4. Enter a name and API name for the new flow.
    5. Save and activate the flow.
3. Clone and activate the Process Scheduled Access Delegation Requests Batch scheduled flow. The flow identifies pending access delegation requests and updates proxy access based on the latest request data. For example, if a student delegates access to grades, the flow shares all records defined by the dataset. If new grade records are added after access is delegated, the flow automatically detects and shares those records during its next scheduled run.
    1. From Setup, in the Quick Find box, enter _Flows_, and then select **Flows**.
    2. Select **Process Scheduled Access Delegation Requests Batch**.
    3. Click **Save As New Flow**.
    4. Enter a name and API name for the new flow.
    5. To process access delegation requests on a different schedule, edit the frequency in the Start element.
    6. Save and activate the flow.
4. Confirm the batch job that processes access delegation requests.
    1. From Setup, in the Quick Find box, enter Batch Management, and select **Batch Management**.
    2. Open, and if needed, customize **Process Delegated Access Sharing**.

- **[How Proxy Identity is Resolved For Delegated Access](https://help.salesforce.com/s/articleView?id=sfdo.ec_proxy_identity_resolution.htm&release=264.0.0&type=5)**  
    When a student names a proxy, the proxy's first name, last name, and email address are matched with an existing contact and user record. If a contact record exists for the proxy, Salesforce uses the information. If no contact record exists, Salesforce sends a sign-up email. If Salesforce finds a user record for the proxy but no contact record exists, Salesforce sends a sign-up email to invite the proxy to create an Experience Cloud person account.