Users: Scenario 1 Solution

The solution section provides an overview of how to solve this scenario, and why that solution was chosen.  The Solution Steps section immediately following outlines the exact steps used to replicate the solution.

Solution:

There are two ways that you can solve this scenario:

  1. You can grant login access to the administrator to all users.  This setting may be enabled by default in newer orgs.
    • Navigate to Setup –> Security Controls –> Login Access Policies.
    • Check ‘Enabled’ next to ‘Administrators Can Login as Any User’.
    • Click Save.
  2. You can have James Smith grant access to the system administrator.
    • Login to Salesforce (using the email generated from the previous exercise) as James Smith.
    • Setup –> My Personal Information –> Grant Login Access –> Your Company’s Administrator: One Year –> Save.
    • Click Your Name –> Logout

Once you have login access granted (either to all users, or the specific user), the administrator will then have the ability to login as that user from their account (without sharing credentials).

Note: Ensure that “Force relogin after Login-As-User” is unchecked under Setup –> Security Controls –> Session Settings (without this change you will be logged out completely after you logout as James Smith below).  These instructions assume that “Enable Improved Setup User Interface” is disabled (Setup –> Customize –> User Interface).  If you have this setting turned on, navigating the setup menu will have different menu selections.

Solution Steps:

[As System Administrator]

Now, as the system administrator you can login as James without using his username/password.

  1. Login to Salesforce (using your administrator credentials).
  2. Setup –> Manage Users –> Users –> Click Login next to James Smith.  This will show a black bar in the top right of the screen that shows you are now logged in as another user.  All actions that you take while logged in as James will appear as if James performed them (just as if you had logged in using his username and password).  Likewise any reports or any other functionality that you access will be done in accordance with James Smith’s security settings.
  3. Click Create New –> Lead.  Enter lead information, save the record.  Verify lead creator is James Smith.
  4. Logout.  You should be returned to James Smith’s user record – you are now returned to your session as the system administrator.

91 Responses to “Users: Scenario 1 Solution”

  1. sf.dev3 February 13, 2017 at 4:03 am #

    Hi John, I am unable to see ‘Administrators Can Login as Any User’ under Setup > Security >
    Login Access Policies.

    What is see is a radio button having option ‘Salesforce.com Support’ – Available to user / Available for Administrator Only

  2. tmrakesh@yahoo.com February 3, 2017 at 5:43 pm #

    I did Check ‘Enabled’ next to ‘Administrators Can Login as Any User’. But when i go to Manage users, i do not see the Login button next to the user name

  3. akshay.schaturvedi January 17, 2017 at 2:12 pm #

    Hi John,

    I don’t know why the setting “Administrators Can Login as Any User” is not getting displayed at my end. Can you please suggest ?

    • JohnCoppedge January 18, 2017 at 4:54 pm #

      How old is your DE org? This feature used to require a feature request, although I thought this was enabled for all orgs now…

      • mattfnelson January 18, 2017 at 5:12 pm #

        Hi John, I signed up for a new DE org last week specifically for CoD. It should be the newest version.

      • akshay.schaturvedi January 18, 2017 at 11:45 pm #

        I just signed up 3 days back, is it something to do with the licencing ?

  4. sovike@yeah.net December 12, 2016 at 8:19 am #

    Hi,
    we don’t have the “log in as XX user” function in sandbox version.
    So there is no way to practice.
    please note.
    thanks

    • JohnCoppedge December 12, 2016 at 7:42 pm #

      This should be present in sandboxes – this can also be turned on globally. If global, then you will see the option to login all users from the users page in setup.

      • mattfnelson January 14, 2017 at 9:01 pm #

        As with the above user, this feature is not present in the dev account I created for use with your curriculum. I can grant access to the administrator on an individual basis, but the global setting is not present. It is also not enable by default, as currently I cannot log in as James Smith at the moment. Do you have any thoughts?

  5. MKlobe May 18, 2016 at 12:07 am #

    Where were these solutions explained in this lesson? Did I overlook something here?

  6. ranjan April 9, 2016 at 10:55 pm #

    hello,
    When i log in as james smith it opens up new window of org and remains open after i log out as james smith …. why it does not take me back to my original page??

    • JohnCoppedge April 10, 2016 at 9:58 pm #

      You probably need this setting:

      Note: Ensure that “Force relogin after Login-As-User” is unchecked under Setup –> Security Controls –> Session Settings (without this change you will be logged out completely after you logout as James Smith below). These instructions assume that “Enable Improved Setup User Interface” is disabled (Setup –> Customize –> User Interface). If you have this setting turned on, navigating the setup menu will have different menu selections.

  7. tylerzika March 3, 2016 at 5:57 pm #

    To be able to log in as another user without their password as an admin, this feature isn’t enabled my default on my org.

    I wish in the scenario it mentioned this, because when I look at the docs

    https://help.salesforce.com/apex/HTViewHelpDoc?id=logging_in_as_another_user.htm&language=en

    it just says click the link next to the users name, but I couldn’t find the link.

    • JohnCoppedge April 10, 2016 at 9:59 pm #

      That’s the first method to solve?

      You can grant login access to the administrator to all users. This setting may be enabled by default in newer orgs.
      Navigate to Setup –> Security Controls –> Login Access Policies.
      Check ‘Enabled’ next to ‘Administrators Can Login as Any User’.
      Click Save.

  8. tejalr8@gmail.com February 4, 2016 at 12:57 am #

    Hi john,
    Im sorry i m not able to understand your point when you are explain a note after showing 2 ways to get login access for admin for other user…
    My confusion is at this line …what do you want to say by saying this line?
    “These instructions assume that “Enable Improved Setup User Interface” is disabled (Setup –> Customize –> User Interface). If you have this setting turned on, navigating the setup menu will have different menu selections.”
    in Note: section.
    Thank you.
    Tejal.

    • JohnCoppedge February 4, 2016 at 3:47 am #

      Make sure the “Enable Improved Setup User Interface” setting is turned OFF in the user interface settings- otherwise your menus will look different.

      • tejalr8@gmail.com February 4, 2016 at 4:07 am #

        Ok john,
        thank you…got it now.:)
        Tejal.

  9. coolpranu@yahoo.com December 19, 2015 at 7:51 pm #

    I am not sure if I am jumping ahead here..
    I downloaded Salesforce app on my android phone and logged in as Admin.
    As per this lesson, I logged in as James Smith and created a lead.
    Now, when I go back to my Salesforce app on my phone and when I try to see the lead, it’s all blank and won’t show the lead created by James Smith.
    Is this a hard restriction to see the leads created by James unless I enable queues or something? If yes, can you please let me know how to make this work?

    Thanks.

    • JohnCoppedge December 22, 2015 at 7:13 pm #

      The admin (your primary login) will be able to see all leads. The app is probably just showing recently viewed leads, which would be different based on who is logged in (James’ most recently viewed lead being the one he created).

  10. mlbusch64 December 5, 2015 at 5:01 pm #

    John,
    I went to create a new lead logged in as James and this is the error message I got when I saved. I do have Cloud Swarm installed.

    Error: Invalid Data.
    Review all error messages below to correct your data.
    Apex trigger leadSwarm caused an unexpected exception, contact your administrator: leadSwarm: execution of AfterInsert caused by: line 39, column 54: trigger body is invalid and failed recompilation: Dependent class is invalid and needs recompilation: swarmhelper: line 50, column 54: sObject type ‘EntitySubscription’ is not supported.

  11. Karthik Srinivasan July 19, 2015 at 9:46 pm #

    I am facing the same issue,

    Setup –> My Personal Information –> Grant Login Access –> Your Company’s Administrator” .
    “Your Company’s Administrator ” is not visible to me.
    Only Salesforce.com support option is visible.

    Also i don’t see the following: The administrator can turn on the setting “Administrators Can Log in as Any User”, which would then bypass the need for individual users to grant login access. Navigate to Setup –> Security Controls –> Login Access Policies to enable.

    can someone help? i have admin access to my org and i have setup a sample standard user with salesforce license.

    thanks
    karthik

    • JohnCoppedge July 20, 2015 at 4:15 pm #

      Can you login as the other user? If so this may be automatically enabled in the newer dev orgs.

  12. gareemabhandari July 7, 2015 at 6:07 am #

    If I am logged in as james and in “Setup –> My Personal Information –> Grant Login Access –> Your Company’s Administrator” .
    “Your Company’s Administrator ” is not visible to me.
    Only Salesforce.com support option is visible.
    Is this because I have done some setting changes in Adminstrator?

    • gareemabhandari July 7, 2015 at 6:30 am #

      John,
      I cross checked the “enhanced user interface setting” reading above comments.
      Can you please tell how the licence are visible in user licence drop down list? Somehow salesforce licence option is not visible for me. I guess because of this only I am facing the issue.

      • JohnCoppedge July 20, 2015 at 5:36 pm #

        You may be out of licenses if you are creating a new user and the license type is not selectable

    • rmathews October 12, 2015 at 9:35 pm #

      I had this same issue, – this happens if / after you enabled in – step 1
      Step 1. You can grant login access to the administrator to all users. This setting may be enabled by default in newer orgs.
      Navigate to Setup –> Security Controls –> Login Access Policies.
      Check ‘Enabled’ next to ‘Administrators Can Login as Any User’.
      Click Save
      GO BACK AND UNCHECK – ENABLED.
      then the administrator will show up as an option – ( it did for me)

      RM

  13. recall3826 June 20, 2015 at 6:57 pm #

    Hi John!

    You might want to update the solution due to the latest release: Admins can now enable the feature: “Administrators Can Log in as Any User”.

    It is located in Security Controls > Login Access Policies

  14. Raajesh Kumar June 15, 2015 at 12:44 am #

    In real world scenario, I guess the first option of admin login with user password is not possible right ? Is there a way when the admin creates a new user he can grant admin access to himself (instead of user going to settings and enabling that checkbox). I understand for security reason, it make sense that user only should grant access to other. But for admin, I am wondering whether he can do it himself?

    • JohnCoppedge June 15, 2015 at 1:45 pm #

      If ‘login as any user’ is turned on the org, then the admin will be able to login as any user at any time from their account (without the user granting the login permission).

  15. anish goyal May 14, 2015 at 7:09 pm #

    Hi JohnCoppedge : Please Menition In the second paragraph starting with “NOTE: ” that the instructions are to be carried out in Sysytem admin account. As, these feature are not available in the account created by the name of James.. If something else is wrong then please help know how to bring that feature in the account created by the name of “James”

  16. anish goyal May 12, 2015 at 12:46 am #

    cant find Setup –> Customize –> User Interface ??
    kindly help i am logged into the account of james

  17. Yacine Ferguene February 5, 2015 at 10:01 pm #

    Got it thanks John I can now log in as the other user as many times as I want without being logged out every time I do so.

  18. Yacine Ferguene February 5, 2015 at 4:53 pm #

    Hi John
    I have a question,
    I logged in as James and when I logged out to return to my own profile, it logged me out of Salesforce instead of taking me back to my personal SF page
    Is there an option to enable to prevent this from happening ?

    thanks

    • JohnCoppedge February 5, 2015 at 8:03 pm #

      Yep

      Note: Ensure that “Force relogin after Login-As-User” is unchecked under Setup –> Security Controls –> Session Settings (without this change you will be logged out completely after you logout as James Smith below).

  19. Susan Sampson February 4, 2015 at 5:29 pm #

    Hi John, for some reason when I try to grant login access in only make the login button next to my name available and not to my fake user James. Am I missing something?
    Thanks,
    Susan

  20. Saman Muhammad January 31, 2015 at 2:42 pm #

    Hi John,
    I made that scenario, but it’s logs me out from system!

    • JohnCoppedge February 2, 2015 at 3:59 pm #

      Added this note above: Ensure that “Force relogin after Login-As-User” is unchecked under Setup –> Security Controls –> Session Settings (without this change you will be logged out completely after you logout as James Smith below).

  21. Mike Salvador December 30, 2014 at 2:56 am #

    Hi John,

    I’m having the same issue using a trial account that another user had. I created James with the Salesforce User License as requested with a Standard User Profile. When I go to grant access I can only grant it to support. I have created a new user before with the actual system and tested things as a user so I know how to do this but otherwise this would have been frustrating. BTW – Overall great site so far.

  22. Vasu Sanghani December 23, 2014 at 4:09 am #

    Hi John,

    Looks like the ‘Enable Improved Setup User Interface’ is already checked. Why is it? would that be an org setting?

    But it does make the site easier to see. What is the normal way?

    • JohnCoppedge December 23, 2014 at 3:09 pm #

      This site was written before the new setup menu was released – hence the instructions to disable it. If you get a new org it will have it enabled, many old orgs will not have this enabled.

  23. Synthia Beauvais September 18, 2014 at 7:00 am #

    Hello,

    When trying to create new lead, I do not have the option to do so. When I click Create New it gives me the following options:

    Event
    Task
    Account
    Contact
    Report

    Am I doing something wrong? I do see the black bar that says “Logged in as James Smith”.

    Thanks.
    Synthia

    • JohnCoppedge September 27, 2014 at 7:59 pm #

      Look at what app you have selected – if you do not have the leads tab displayed, then create lead will not appear in the quick create menu. Try selecting the sales app – or go the leads tab from the all tabs menu (the plus mark at the end of the list of tabs) and select the leads tab.

  24. Berglind Heath-Smith September 9, 2014 at 2:21 pm #

    Hi John – I managed to Log in as James & create the lead no problem without going through the stage where as James I grant myself login access. However, I decided to go through the motions of granting access, only to find “James” faced with an “insufficient privileges” error message.

    He is set up as a standard user – should I just leave it as is, or is there a setting I should tweak now which I may need for future exercises?

    Thanks

    • JohnCoppedge September 17, 2014 at 7:20 pm #

      Standard should be fine for this exercise – where are you getting the error? If you were able to login as James and create the lead, then it is not a profile issue.

      If the error came when attempting to login as James (from the administrator login), then that is a different permissions issues (I would double check that grant login access has been set up correctly from James’ account).

  25. J Shu August 30, 2014 at 3:51 am #

    Never mind, found the solution, “James smith” has wrong profile.
    Reassigned him to “sales” profile and “lead” field showed up.

  26. Sarah Hewing August 25, 2014 at 8:58 pm #

    I don’t see the lead option. When I click the + at the top, I have the option for Accounts, chatter, contacts, dashboards, documents, files, groups, home, ideas, people, profile, profile feed, profile overview, reports & Site.com… but no leads. What am I doing wrong?

    • Sarah Hewing August 25, 2014 at 9:12 pm #

      Nevermind… I found the solution on my own. Thanks

      • J Shu August 30, 2014 at 3:34 am #

        Hi! Sarah,

        Do you mind sharing how you found the solution? I got exact same thing as you got on your previous post and still looking for solution.

        • JohnCoppedge September 1, 2014 at 8:43 pm #

          Apologies on the delayed reply. In order to ensure that your user has access to the tab, check the profile. The profile will need to grant access to read/create the lead object, and will cannot have the lead tab set to “hidden”.

          • a2attard March 27, 2017 at 3:13 am #

            Hey, I was having the same problem. I initially thought the same thing and checked the profile. However, I am now on the profile that james is using but when I type in “lead” using Ctrl + F, it’s found nowhere on the page.

          • a2attard March 27, 2017 at 3:15 am #

            Tab section not showing lead object: http://imgur.com/olQ5N1k

  27. Peichung Chiu August 15, 2014 at 10:37 pm #

    How do I logout as James Smith and return to system admin session? When I click logout, it logs me out completely.

    • JohnCoppedge August 19, 2014 at 2:47 pm #

      You should get a dialog box that says Logged in as: James Smith in the top right- when that box is present, logging out should return you to your admin login session (unless there is some other changed setting that I am not familiar with).

    • J Shu August 31, 2014 at 7:23 pm #

      I got same issue and was able to fix it by UN checking/selecting the
      Force relogin after Login-As-User
      under Session Settings

      >>Setup>>Security Control>> Session Settings
      Lock sessions to the IP address from which they originated
      Require secure connections (HTTPS)
      following Force relogin after Login-As-User – —-> do NOT check this
      Require HttpOnly attribute
      Use POST requests for cross-domain sessions

      • Peichung Chiu August 31, 2014 at 10:13 pm #

        Thank you!! Exactly what I was looking for!

      • JohnCoppedge September 1, 2014 at 8:42 pm #

        Awesome thanks J – haven’t had to change this one myself!

        • J Shu September 1, 2014 at 10:18 pm #

          Oh. You are very welcome! Thank YOU for running the site.. it’s great to have a structured road map in this information overload era.

          J. Shu / Jessica Shu

  28. Barbara Hill June 24, 2014 at 2:17 am #

    I didn’t find anything earlier that told me to uncheck the enhanced user interface. This resulted in about an hour of lost time, futzing around looking for this stuff that was supposed to be done in this scenario. This needs to be made really clear up front. I finally found it looking at some of the comments. You really need to fix this issue. It’s very frustrating and time consuming.

    • JohnCoppedge June 24, 2014 at 1:06 pm #

      I do warn up front about that but yes I understand the navigational issue. I just haven’t quite found an ideal fix. If you have any ideas, I’m all ears!

  29. anusha pudota June 6, 2014 at 3:55 am #

    Hi Shauntel,

    At the end of all tabs bar in your application, you can see a little ‘+ ‘ sign. click on it, you will be able to see all hidden tabs and will also find, ‘leads’ tab in there.

  30. Shauntel Beecham May 28, 2014 at 11:37 pm #

    Im not sure why, but when I log in as James Smith, the only tabs available are Home, Chatter, Accounts, Contacts, Reports and Dashboards. Even when I go to “create new” lead is not an available option. Would you happen to know why?

    • anusha pudota June 6, 2014 at 3:55 am #

      Hi Shauntel,

      At the end of all tabs bar in your application, you can see a little ‘+ ‘ sign. click on it, you will be able to see all hidden tabs and will also find, ‘leads’ tab in there.

    • JohnCoppedge June 10, 2014 at 9:58 pm #

      Hi Shauntel – this could also be caused by not setting up the user license or profile correctly; I would double check the user settings. Cheers,

      John

  31. John Buckley March 27, 2014 at 11:46 pm #

    Never mind: I just found it at the bottom of the profile.

  32. John Buckley March 27, 2014 at 11:45 pm #

    Newly created lead says “Lead Owner: James Smith “.

    I don’t see anything that says “Lead Creator.”

    What am I missing?

  33. Jess Battle March 5, 2014 at 11:14 pm #

    hi,

    when I log in as James, and attempt to grant login access – System Administrator is not an option, only salesforce support.

    Thanks,
    Jess

    • JohnCoppedge March 6, 2014 at 1:56 pm #

      Hi Jess,

      I would make sure James is assigned the correct profile and that the enhanced user interface is disabled (see comments above). Cheers,

      John

    • rmathews October 12, 2015 at 9:07 pm #

      I had this same issue when I was practicing step 2 – this happens if / after you enabled – step 1
      1. You can grant login access to the administrator to all users. This setting may be enabled by default in newer orgs.
      Navigate to Setup –> Security Controls –> Login Access Policies.
      Check ‘Enabled’ next to ‘Administrators Can Login as Any User’.
      Click Save
      GO BACK AND UNCHECK ENABLE.
      then the administrator will show up as an option – ( it did for me)

      Thanks
      RM

  34. Cooper Miller February 17, 2014 at 8:20 pm #

    John,

    Do you recommend we keep enhanced user interface disabled? If this would make it easier to follow along with your directions for the remainder of the training I would like to do so. If you believe it is a good idea could you post how to achieve this? Thank you for your assistance.

    • JohnCoppedge February 19, 2014 at 5:22 am #

      Hi Cooper,

      Yes I do recommend disabling the enhanced user interface; this is now reflected in getting started:

      Instructions within this guide make the assumption that the Improved Setup User Interface is disabled.

      I suggest you double-check your org settings by navigating to Setup –> Customize –> User Interface; ensure “Enable Improved Setup User Interface” is not checked.

      If you enable this feature, step-by-step instructions within scenarios and exercises will not line up correctly (as the setup navigation menus will be different).

  35. khan zafar February 17, 2014 at 3:40 am #

    Here are steps
    Click John at the top right of the page
    John>my setting>personal (left side of the page)>Grant Account Login access>Click Login next to James Smith.

    • JohnCoppedge February 19, 2014 at 5:23 am #

      With the enhanced user setup enabled? It may cause issues with other instructions in the guide…

  36. Merrily Neill January 18, 2014 at 10:48 pm #

    I logged in as James (according to the email instructions) and could find no “My Personal Information”. The URL for James setup is https://na15.salesforce.com/ui/setup/Setup. Where is “My Personal Information” please?

  37. Amber November 5, 2013 at 5:54 am #

    In this scenario, step 2 [As James Smith] is incorrect. It should be:

    2. Your Name -> My Settings -> Personal -> Grant Account Login Access

    • JohnCoppedge December 21, 2013 at 8:07 pm #

      Hi Amber – this is because you have the improved setup menu enabled; I’ve added language to address this, thanks!

Leave a Reply