---
schema_version: "1"
id: 934bdadcbbc639b0d22a88a0f7838e14bcaf7aed6910ae9fa0a0aefc6c543d9e
title: Control Login Access Policies
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/controlling_login_access.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.controlling_login_access.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: ef17bde47df9345255c62b947018d3c4e4132eec55b937da7c60a7c45e0f64d4
description: Control whether your users are prompted to grant account access to Salesforce admins, and whether users can grant access to publishers.
products:
  - Security
  - Cross Cloud
release: "264"
---
# Control Login Access Policies

Control whether your users are prompted to grant account access to Salesforce admins, and whether users can grant access to publishers.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition">
        <colgroup>
          <col>
        </colgroup>
        <tbody>
          <tr class="">
            <td class="slds-cell-wrap" style="vertical-align:top;">Available in: both Salesforce Classic and
              Lightning Experience</td>

          </tr>
          <tr class="">
            <td class="slds-cell-wrap" style="vertical-align:top;">
              <p>Available in: all editions </p>
              <p style="margin-bottom:0;">Granting
                administrator access available in:
                <strong>Enterprise</strong>, <strong>Performance</strong>,
                <strong>Unlimited</strong>, <strong>Developer</strong>, and
                <strong>Database.com</strong> Editions
              </p>
            </td>

          </tr>
        </tbody>
      </table> <table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d25485e78">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d25485e78 ">To control login access policies: </td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d25485e78 ">Manage Login Access Policies</td>

          </tr>
        </tbody>
      </table>

1. From Setup, enter Login Access Policies in the Quick Find box, then select **Login Access Policies**.
2. To allow admins to log in as any user in the org without first asking them to grant access, enable **Administrators Can Log in as Any User**.
    
    To have this feature removed from your org, contact Salesforce. If you remove the feature, a user must grant login access before an admin can log in to that user’s account for troubleshooting.
3. To prevent users from granting access to a publisher—for example, to comply with regulatory or privacy concerns—click **Available to Administrators Only** for that publisher.
4. Click **Save**.

Users can’t grant login access to managed packages that are licensed to your entire Salesforce org. Only admins with the Manage Users permission can grant access to these publishers. Also, some managed packages don’t have login access. If a package isn’t listed on the Login Access Policies page, login access isn’t available for that package.

The org listed in the Support Organization column, is the [License Management Org](https://developer.salesforce.com/docs/atlas.en-us.pkg2_dev.meta/pkg2_dev/lma_install_app.htm) that owns the managed package.

When multi-factor authentication (MFA) is enabled for your org, admins can still log in as another user. There’s only one scenario where an admin needs to coordinate with a user to have them respond to an MFA challenge: when the user's profile requires a High Assurance session at login, but the admin is logged in with a standard security session level. To avoid this situation, admins should always log in using MFA, which automatically results in a High Assurance session. See [Multi-Factor Authentication](https://help.salesforce.com/s/articleView?id=xcloud.security_overview_2fa.htm&type=5&language=en_US).