7.1.3.3 Profiles - Access and Object Permissions

1. ADvendio Trial Profiles

The ADvendio Trial includes three profiles in the package for you to re-use and customize to your needs. 

Remember: You only get those Profiles with the ADvendio Trial! But make sure to adjust the rights for all profiles to your business needs because the default rights are set to be the same for all three and they allow access to ALL ADvendio objects and features.

  • ADvendio AdOps
  • ADvendio Sales
  • ADvendio SuperUser

All of these use Salesforce Platform User Licenses. If you like to use ADvendio and a regular Salesforce User we recommend to use an 7.1.3.1 Permission Set - ADvendio Super User.


2. Install or Update ADvendio

When installing ADvendio directly in an Org, no Profiles will be transported. New rights will only be transported to existing profiles if you 7.1.5 Install ADvendio for

  1. all users or
  2. sets ADvendio rights for all custom profiles and Admin.

2.1 Install for All Users

Specifies the following settings on all internal custom profiles.

  • Object permissions—“Read,” “Create,” “Edit,” and “Delete” enabled
  • Field-level security—set to visible and editable for all fields
  • Apex classes—enabled
  • Visualforce pages—enabled
  • App settings—enabled
  • Tab settings—determined by the package creator
  • Page layout settings—determined by the package creator
  • Record Type settings—determined by the package creator

The Customer Portal User, Customer Portal Manager, High Volume Customer Portal, Authenticated Website, Partner User, and standard profiles receive no access.

2.2 Install for Specific Profiles

Enables you to choose the usage access for all custom profiles in your organization. You can set each profile to have full access or no access for the new package and all its components.

  • Full Access—Specifies the following settings for each profile.
  • Object permissions—“Read,” “Create,” “Edit,” “Delete,” “View All,” and “Modify All” enabled
  • Field-level security—set to visible and editable for all fields
  • Apex classes—enabled
  • Visualforce pages—enabled
  • App settings—enabled
  • Tab settings—determined by the package creator
  • Page layout settings—determined by the package creator
  • Record Type settings—determined by the package creator
  • No Access—Specifies the same settings as Full Access, except all object permissions are disabled.

2.3 Recommended Best Practices for existing customers with custom profiles

If you want to update your ADvendio installation to the current version and are using custom profiles with different permissions levels for ADvendio Objects (e.g. Sales profiles without access to Invoices & Invoice Items), we recommend the following best practices:

1. During installation select: Install for Specific Profiles


2. Select "No Access" for your custom profiles

 


3. After installation, your custom profiles won't have ADvendio Objects, Fields & Record Types added with the update (previously existing permissions won't be changed). Take a look at our change log to find an overview of each field, object, record type and picklist value added with each new version. You can then configure these rights according to the needs of your custom profiles. History of Change Logs



More Information from Salesforce:
https://developer.salesforce.com/docs/atlas.en-us.appExchangeInstallGuide.meta/appExchangeInstallGuide/appexchange_install_installation.htm

https://help.salesforce.com/articleView?id=distribution_perm_sets_profile_settings.htm&type=5