---
schema_version: "1"
id: 9848816f63cd1c65022dcd3bf787a21efafc5d3d70ace6943f8593394c0360fb
title: Delegated Access Management
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/sfdo/264-0-0/ec_consent_management_and_delegated_access.md
canonical_url: https://help.salesforce.com/s/articleView?id=sfdo.ec_consent_management_and_delegated_access.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 0cedcac9b8dc43c61304e32da39e5c0e26f0a7f827bf3ba44ebe1e8e63f3e684
description: With delegated access management, you can assign proxies and delegate scoped, time-bound access to your information. You decide who acts on your behalf, what access you delegate, and when that access starts and ends.
products:
  - Education
release: "264"
---
# Delegated Access Management

With delegated access management, you can assign proxies and delegate scoped, time-bound access to your information. You decide who acts on your behalf, what access you delegate, and when that access starts and ends.

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small " summary="Required Editions"><caption>Required Editions</caption> <colgroup><col style="width:100%"></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, <strong>Unlimited</strong>, and <strong>Developer</strong> Editions with Education Cloud</td></tr></tbody></table>

This framework supports these delegation methods:

Self-Service

An Experience Cloud user adds their own proxy and delegates access directly.

Staff-Assisted

An Education Cloud user sets up the delegation on behalf of another user.

## Core Principles of Delegated Access

These core principles govern delegated access:

User-Driven

The information owner decides who can access their information.

Time-Bound

Access has defined start and end dates and expires automatically.

External-Ready

Proxies can be external users, including users who self-register through an Experience Cloud portal.

Inherited Least Privilege

A proxy can access only what the delegating user can access.

- **[Delegated Access Management in Education](https://help.salesforce.com/s/articleView?id=sfdo.ec_delegated_access_management_education.htm&release=264.0.0&type=5)**  
    A self-service authorization model helps your institution meet privacy requirements and gives trusted individuals access to student data. Students grant proxies, such as parents, guardians, or other trusted individuals, access to their institutional records.
- **[Set Up Your Org for Delegated Access](https://help.salesforce.com/s/articleView?id=sfdo.ec_set_up_org_delegated_access.htm&release=264.0.0&type=5)**  
    Set up Delegated Access Management, assign permissions, configure student-proxy relationships and record sharing, and add the My Proxies component to case and contact record pages.
- **[Manage Delegated Access](https://help.salesforce.com/s/articleView?id=sfdo.ec_manage_delegated_access.htm&release=264.0.0&type=5)**  
    Data privacy regulations such as FERPA and GDPR require strict access delegation. Students need control over who accesses their data and the ability to revoke access at any time. Your institution also needs audit trails to support compliance. Manage delegated access efficiently, support compliance, build trust, and improve the experience for families.
- **[Staff Assisted Proxy Management and Access Delegation](https://help.salesforce.com/s/articleView?id=sfdo.ec_grant_delegated_access_proxy_user.htm&release=264.0.0&type=5)**  
    Student advisors can grant parents, guardians, and other proxies access to selected student information for a specified time period. Select the delegated access definitions that determine which categories of information the proxy can access.
- **[Delegated Access Statuses](https://help.salesforce.com/s/articleView?id=sfdo.ec_delegated_access_statuses.htm&release=264.0.0&type=5)**  
    Delegated access request statuses show where a request is in the access lifecycle and whether an action is required. Use the statuses to track proxy registration, scheduled access, granting, revocation, expiration, retries, and terminal failures.