Apr 29, 2019 | 0 Comment | Posted by Shrey Sharma

Object Level Security

Object Level Security provides the simplest way to control data access. It prevents user or group of users from creating, viewing, editing or deleting any records of an object by setting permissions on that object.

There are two ways of setting object permissions:
1. Profiles: It determines the objects a user can access and the permissions a user has on any object record.

2. Permission Sets: It provides additional permissions and access settings to users.



Profile is a collection of settings and permissions that determine which data and features in the platform users have access to. Settings determine what users can see for example apps, tabs, fields and record types whereas Permission determine what users can do for example create or edit records of a certain type, run reports and customize the app.

Profiles Control:

  • Object Permission
  • Field Permission
  • User Permission
  • Tab Settings
  • App Settings
  • Apex class access
  • Visualforce page access
  • Page Layouts
  • Record Types
  • Login Hours
  • Login IP Ranges

Profiles are typically defined by a user’s job function but anything that makes sense in an org can be created as a profile.

The platform includes a set of standard profiles.Each of the standard profiles includes a default set of permissions for all of the standard objects available on the platform.


Some of them are:

1. Standard User: Standard User profile has Read, Edit and Delete permissions to most standard objects.

2. Read Only: Read only user had permissions exactly similar to standard user but limits the access to read only.

3. Marketing User: Permissions of Standard User+ Additional Permissions.

4. Contract Manager: Permissions of Standard User + Additional Permissions.

5. Solution Manger: Permissions of Standard User + Additional Permissions.

6. System Administrator: The System Administrator profile has the widest access to data and the greatest ability to configure and customize Salesforce. The System Administrator profile also includes two special permissions namely “View All Data” and “Modify All Data”.

When a custom object is created most profiles except those with modify all data permission do
not give access to that custom object.

Note: Object permissions on Standard profile cannot be edited.

So to overcome through this it is good to make copies/clones of standard profiles and then customize the copies to fit the needs of the organization.

The profiles functionality in an org depends on the user license type.

Note: Every profile should have at least one visible app.

Note: If an app is visible, its tab won’t show up unless a profile has permissions to view the associated objects.

Note: A profile can be assigned to many users but user can be assigned to only one profile at a time.



Next up is Field Level Security

Share This Post

Leave a Comment

Your email address will not be published. Required fields are marked *