---
schema_version: "1"
id: e1f4bd00f416c90c5056dc8cdc4ccf264ed21ba338eade682fedf90dbc0158f1
title: Delegated Access Management in Education
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/sfdo/264-0-0/ec_delegated_access_management_education.md
canonical_url: https://help.salesforce.com/s/articleView?id=sfdo.ec_delegated_access_management_education.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 68b03e56259d30a29d0d53368cff2830e71bef67d7aeae0b8b1a9a1d78d78fc7
description: A self-service authorization model helps your institution meet privacy requirements and gives trusted individuals access to student data. Students grant proxies, such as parents, guardians, or other trusted individuals, access to their institutional records.
products:
  - Education
release: "264"
---
# Delegated Access Management in Education

A self-service authorization model helps your institution meet privacy requirements and gives trusted individuals access to student data. Students grant proxies, such as parents, guardians, or other trusted individuals, access to their institutional records.

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small " summary="Required Editions"><caption>Required Editions</caption> <colgroup><col style="width:100%"></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, <strong>Unlimited</strong>, and <strong>Developer</strong> Editions with Education Cloud</td></tr></tbody></table>

Students don't understand database objects to delegate access. Instead, your Salesforce admin configures user-friendly delegated access definitions backed by data sets that map the underlying objects. Students select these definitions to authorize what their proxies view.

Your Salesforce admin defines the available access levels to govern delegation.

- A data set maps the relevant objects and defines how those records resolve to the student. Your admin structures data sets to bundle underlying records, such as billing statements, course schedules, or financial aid awards. This structure restricts proxy visibility to the intended records.
- A delegated access definition combines a delegated access data set and a permission set into an access option. Your admin configures delegation definitions to map data sets to preapproved permission sets that students can grant to proxies.
- With lifecycle policies, your admin can set system-wide rules for expiration dates and proxy invitation workflows, automating the delegated access lifecycle.

Through a dedicated self-service portal, students maintain direct control over who interacts with their data.

- Invite parents, guardians, or other trusted individuals to register on the proxy portal.
- Select the access definitions that a proxy views or manages.
- Update or terminate proxy access at any time.