Salesforce Platform Developer Practice Exam

What action can users NOT perform in the Delegated Administrators group?

1. Creating new users

2. Editing existing users

3. Creating profiles

4. Logging in as another user

The correct answer is: Creating profiles

In a Delegated Administrators group, users are granted specific administrative privileges to manage certain aspects of the Salesforce organization, primarily concerning user management. However, they do not have the ability to create profiles. This limitation is in place to maintain control over the security and configuration of profiles, which define user permissions, access levels, and system settings. Profiles are a foundational component of Salesforce's security model, regulating what users can see and do within the system. Allowing delegated administrators to create new profiles could lead to inconsistencies and potential security risks. Therefore, while delegated administrators can create new users and edit existing ones, as well as provide support such as password resets, they cannot create profiles, which helps ensure that profile management remains restricted to higher-level administrators with broader oversight of the organization's configuration.