--- schema_version: "1" id: d418fa692a093a24a49845bd69209bbc6a099476d7bb49b3e9a7103541915fd3 title: Set Up Security Controls collection: admin version: current locale: en-us portal_url: https://docs.salesforce.com/admin/current/en-us/sfdo/264-0-0/gem_set_up_security_controls.md canonical_url: https://help.salesforce.com/s/articleView?id=sfdo.gem_set_up_security_controls.htm&release=264.0.0&type=5 source_site: help.salesforce.com content_type: documentation content_hash: d6956c8c99c4fe2051158f14a1d7bb1f804f03d911ef8c5c9b9c70f9bc9e2724 description: Configure and assign permission sets and page layouts to give your users access to the information they need. products: - Nonprofit release: "264" --- # Set Up Security Controls Configure and assign permission sets and page layouts to give your users access to the information they need. As with any Salesforce implementation, you set up security in GEM so that users only have access to what's required to do their jobs. We recommend certain settings for profiles, permissions, and page layouts, based on what GEM requires for object, field, and app access.  We don't cover other security considerations, such as organization-wide defaults, sharing rules, or role hierarchies. It's up to you to determine what's appropriate for your institution's security model. - **[Set Up Gift User Permissions](https://help.salesforce.com/s/articleView?id=sfdo.gem_set_up_security_controls.htm&release=264.0.0&type=5)** Use the Accounting Subledger and GEM Gift Entry permission sets to grant users access to gift entry objects and data. - **[Assign Permission Sets](https://help.salesforce.com/s/articleView?id=sfdo.gem_set_up_security_controls.htm&release=264.0.0&type=5)** Assign permission sets to the users who you want to grant access to gift entry functionality. - **[Assign Page Layouts](https://help.salesforce.com/s/articleView?id=sfdo.gem_set_up_security_controls.htm&release=264.0.0&type=5)** Learn about the page layouts that come with GEM and NPSP, and assign them to users based on the information they need to see and work with. ## Set Up Gift User Permissions Use the Accounting Subledger and GEM Gift Entry permission sets to grant users access to gift entry objects and data. Permission sets define how users access objects and data, and what they can do within the application. Each user in an org has only one profile, but you can assign a user multiple permission sets. GEM includes a single permission set, called Gift Entry, that grants access to GEM functionality. For more information on what's in this permission set, see [GEM Gift Entry Permission Set Contents](https://salesforce.quip.com/buchajzqynnb). You can't edit this permission set, but you can clone it and add more permissions to suit your organization's guidelines and regulations. Just be sure not to remove any of the included permissions. Assign the Accounting Subledger permission set, or a cloned version, to all GEM users. For more information about cloning or updating permission sets, see [Permission Sets](https://help.salesforce.com/articleview?id=perm_sets_overview.htm&type=5) in Salesforce Help. ## Assign Permission Sets Assign permission sets to the users who you want to grant access to gift entry functionality. After you've configured a permission set, assign it to users. Don’t forget, you can assign more than one permission set to a user. 1. Click ![Setup](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-sfdo-gift_entry_manager-264-0-0-production-enus/06e55002-f089-4a3e-bc0c-67a1c776fdd3/resources-product/images/setup.png), then click **Setup**. 2. From Setup, enter Permission Sets in the Quick Find box, then select **Permission Sets**. 3. Click the permission set you're assigning. 4. Click **Manage Assignments**. 5. Click **Add Assignments**. 6. Select the users being assigned. 7. Click **Assign**. 8. Click **Done**. ## Assign Page Layouts Learn about the page layouts that come with GEM and NPSP, and assign them to users based on the information they need to see and work with. As you prepare to work with data in your org, take care of a few page layout configuration and assignment tasks now so it’s easier to verify your data. You'll see how the provided page layouts display information about donors and donations. Later on, you can change these layouts or customize your own page layouts with fields and related lists provided by GEM. Here are the page layouts to assign: | Object | Page Layout | Assign to | | --- | --- | --- | | Contact | GEM Contact Layout | All record types for any user profiles needing to see donation information | | Account | GEM Household Layout | Household Account record type, any user profiles needing to see donation information | | Account | GEM Organization Layout | Other Account record types, any user profiles needing to see donation information | | Opportunity | GEM Gift Layout | All donation-related record types, any user profiles needing to see donation information | | NPSP Data Import | GEM Gift Layout | Any user profiles needing to see donation information | 1. Click ![Setup](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-sfdo-gift_entry_manager-264-0-0-production-enus/06e55002-f089-4a3e-bc0c-67a1c776fdd3/resources-product/images/setup.png), then click **Setup**. 2. Click the **Object Manager** tab. 3. In the list of objects, click the name of the object you're configuring. 4. Click **Page Layouts**. 5. Click **Page Layout Assignment**. 6. Click **Edit Assignment**. Assign the appropriate page layout. 7. Click **Save**. 8. Click the **Object Manager** tab again. Repeat this process for the objects listed.