Solution:
There are two ways that you can solve this scenario:
- You can grant login access to the administrator to all users. This setting may be enabled by default in newer orgs.
- Navigate to Setup –> Security Controls –> Login Access Policies.
- Check ‘Enabled’ next to ‘Administrators Can Login as Any User’.
- Click Save.
- You can have James Smith grant access to the system administrator.
- Login to Salesforce (using the email generated from the previous exercise) as James Smith.
- Setup –> My Personal Information –> Grant Login Access –> Your Company’s Administrator: One Year –> Save.
- Click Your Name –> Logout
Once you have login access granted (either to all users, or the specific user), the administrator will then have the ability to login as that user from their account (without sharing credentials).
Note: Ensure that “Force relogin after Login-As-User” is unchecked under Setup –> Security Controls –> Session Settings (without this change you will be logged out completely after you logout as James Smith below). These instructions assume that “Enable Improved Setup User Interface” is disabled (Setup –> Customize –> User Interface). If you have this setting turned on, navigating the setup menu will have different menu selections.
Solution Steps:
[As System Administrator]
Now, as the system administrator you can login as James without using his username/password.
- Login to Salesforce (using your administrator credentials).
- Setup –> Manage Users –> Users –> Click Login next to James Smith. This will show a black bar in the top right of the screen that shows you are now logged in as another user. All actions that you take while logged in as James will appear as if James performed them (just as if you had logged in using his username and password). Likewise any reports or any other functionality that you access will be done in accordance with James Smith’s security settings.
- Click Create New –> Lead. Enter lead information, save the record. Verify lead creator is James Smith.
- Logout. You should be returned to James Smith’s user record – you are now returned to your session as the system administrator.
Hi John, quick question…I was able to complete solution #1 however on #2 (Setup –> My Personal Information –> Grant Login Access –> Your Company’s Administrator: One Year –> Save) I get as far as: Setup –> My Personal Information –> Grant Login Access but then I get an “Insufficient Privileges” message. I apologize if I missed this in the comments above but I wasn’t able to find the answer. Can you help clarify what step(s) I may have missed?
Thanks!
I’m guessing you’re selecting grant login access to Salesforce support rather than you system admin?
Hi John, I am unable to see ‘Administrators Can Login as Any User’ under Setup > Security >
Login Access Policies.
What is see is a radio button having option ‘Salesforce.com Support’ – Available to user / Available for Administrator Only
is is possible to turn off this feature (https://help.salesforce.com/articleView?err=1&id=controlling_login_access.htm&siteLang=en_US&type=0) but it is on by default. Are you logged in as an administrator in a DE org?
Very old orgs might require that you request to have this feature turned on as well.
I did Check ‘Enabled’ next to ‘Administrators Can Login as Any User’. But when i go to Manage users, i do not see the Login button next to the user name
Are those users regular salesforce licenses and enabled?
Hi John,
I don’t know why the setting “Administrators Can Login as Any User” is not getting displayed at my end. Can you please suggest ?
How old is your DE org? This feature used to require a feature request, although I thought this was enabled for all orgs now…
Hi John, I signed up for a new DE org last week specifically for CoD. It should be the newest version.
I just signed up 3 days back, is it something to do with the licencing ?
under setup –> “Login Access Policies” you don’t see this?
https://help.salesforce.com/articleView?err=1&id=controlling_login_access.htm&siteLang=en_US&type=0
I have a new DE org this week and it is there
aaaaannnddd, it’s there now. No idea why it wasn’t displaying the other day, but I am now able to see and enable this feature. Weird.
Don’t know why its still not visible to me. Kindly have a look at the below screenshot.
https://www.dropbox.com/s/6jkk7j25v3a1144/Login%20Access%20Policies.png?dl=0
Hey John,
My BAD…Its all sorted now. I created the practice account under “login.salesforce.com” not “developer.salesforce.com”. Done Now.
Thanks for all the help. 🙂
Hi,
we don’t have the “log in as XX user” function in sandbox version.
So there is no way to practice.
please note.
thanks
This should be present in sandboxes – this can also be turned on globally. If global, then you will see the option to login all users from the users page in setup.
As with the above user, this feature is not present in the dev account I created for use with your curriculum. I can grant access to the administrator on an individual basis, but the global setting is not present. It is also not enable by default, as currently I cannot log in as James Smith at the moment. Do you have any thoughts?
looks like we resolved this above!
Where were these solutions explained in this lesson? Did I overlook something here?
Hi there – this ties back to the key concept “Describe the steps required to login as another user.”
I cant seem to find “Describe the steps required to login as another user.”
On this page http://classic.certifiedondemand.com/user-setup-login-process/
hello,
When i log in as james smith it opens up new window of org and remains open after i log out as james smith …. why it does not take me back to my original page??
You probably need this setting:
Note: Ensure that “Force relogin after Login-As-User” is unchecked under Setup –> Security Controls –> Session Settings (without this change you will be logged out completely after you logout as James Smith below). These instructions assume that “Enable Improved Setup User Interface” is disabled (Setup –> Customize –> User Interface). If you have this setting turned on, navigating the setup menu will have different menu selections.
To be able to log in as another user without their password as an admin, this feature isn’t enabled my default on my org.
I wish in the scenario it mentioned this, because when I look at the docs
https://help.salesforce.com/apex/HTViewHelpDoc?id=logging_in_as_another_user.htm&language=en
it just says click the link next to the users name, but I couldn’t find the link.
That’s the first method to solve?
You can grant login access to the administrator to all users. This setting may be enabled by default in newer orgs.
Navigate to Setup –> Security Controls –> Login Access Policies.
Check ‘Enabled’ next to ‘Administrators Can Login as Any User’.
Click Save.
Hi john,
Im sorry i m not able to understand your point when you are explain a note after showing 2 ways to get login access for admin for other user…
My confusion is at this line …what do you want to say by saying this line?
“These instructions assume that “Enable Improved Setup User Interface” is disabled (Setup –> Customize –> User Interface). If you have this setting turned on, navigating the setup menu will have different menu selections.”
in Note: section.
Thank you.
Tejal.
Make sure the “Enable Improved Setup User Interface” setting is turned OFF in the user interface settings- otherwise your menus will look different.
Ok john,
thank you…got it now.:)
Tejal.
I am not sure if I am jumping ahead here..
I downloaded Salesforce app on my android phone and logged in as Admin.
As per this lesson, I logged in as James Smith and created a lead.
Now, when I go back to my Salesforce app on my phone and when I try to see the lead, it’s all blank and won’t show the lead created by James Smith.
Is this a hard restriction to see the leads created by James unless I enable queues or something? If yes, can you please let me know how to make this work?
Thanks.
The admin (your primary login) will be able to see all leads. The app is probably just showing recently viewed leads, which would be different based on who is logged in (James’ most recently viewed lead being the one he created).
John,
I went to create a new lead logged in as James and this is the error message I got when I saved. I do have Cloud Swarm installed.
Error: Invalid Data.
Review all error messages below to correct your data.
Apex trigger leadSwarm caused an unexpected exception, contact your administrator: leadSwarm: execution of AfterInsert caused by: line 39, column 54: trigger body is invalid and failed recompilation: Dependent class is invalid and needs recompilation: swarmhelper: line 50, column 54: sObject type ‘EntitySubscription’ is not supported.
That papers to be caused by cloud swarm …
I am facing the same issue,
Setup –> My Personal Information –> Grant Login Access –> Your Company’s Administrator” .
“Your Company’s Administrator ” is not visible to me.
Only Salesforce.com support option is visible.
Also i don’t see the following: The administrator can turn on the setting “Administrators Can Log in as Any User”, which would then bypass the need for individual users to grant login access. Navigate to Setup –> Security Controls –> Login Access Policies to enable.
can someone help? i have admin access to my org and i have setup a sample standard user with salesforce license.
thanks
karthik
Can you login as the other user? If so this may be automatically enabled in the newer dev orgs.
If I am logged in as james and in “Setup –> My Personal Information –> Grant Login Access –> Your Company’s Administrator” .
“Your Company’s Administrator ” is not visible to me.
Only Salesforce.com support option is visible.
Is this because I have done some setting changes in Adminstrator?
John,
I cross checked the “enhanced user interface setting” reading above comments.
Can you please tell how the licence are visible in user licence drop down list? Somehow salesforce licence option is not visible for me. I guess because of this only I am facing the issue.
You may be out of licenses if you are creating a new user and the license type is not selectable
I had this same issue, – this happens if / after you enabled in – step 1
Step 1. You can grant login access to the administrator to all users. This setting may be enabled by default in newer orgs.
Navigate to Setup –> Security Controls –> Login Access Policies.
Check ‘Enabled’ next to ‘Administrators Can Login as Any User’.
Click Save
GO BACK AND UNCHECK – ENABLED.
then the administrator will show up as an option – ( it did for me)
RM
Hi John!
You might want to update the solution due to the latest release: Admins can now enable the feature: “Administrators Can Log in as Any User”.
It is located in Security Controls > Login Access Policies
Thanks recall – thought I had already added this. Updated.
In real world scenario, I guess the first option of admin login with user password is not possible right ? Is there a way when the admin creates a new user he can grant admin access to himself (instead of user going to settings and enabling that checkbox). I understand for security reason, it make sense that user only should grant access to other. But for admin, I am wondering whether he can do it himself?
If ‘login as any user’ is turned on the org, then the admin will be able to login as any user at any time from their account (without the user granting the login permission).
Hi JohnCoppedge : Please Menition In the second paragraph starting with “NOTE: ” that the instructions are to be carried out in Sysytem admin account. As, these feature are not available in the account created by the name of James.. If something else is wrong then please help know how to bring that feature in the account created by the name of “James”
cant find Setup –> Customize –> User Interface ??
kindly help i am logged into the account of james
Got it thanks John I can now log in as the other user as many times as I want without being logged out every time I do so.
Hi John
I have a question,
I logged in as James and when I logged out to return to my own profile, it logged me out of Salesforce instead of taking me back to my personal SF page
Is there an option to enable to prevent this from happening ?
thanks
Yep
Note: Ensure that “Force relogin after Login-As-User” is unchecked under Setup –> Security Controls –> Session Settings (without this change you will be logged out completely after you logout as James Smith below).
Hi John, for some reason when I try to grant login access in only make the login button next to my name available and not to my fake user James. Am I missing something?
Thanks,
Susan
You are probably logged in as James?
Hi John,
I made that scenario, but it’s logs me out from system!
Added this note above: Ensure that “Force relogin after Login-As-User” is unchecked under Setup –> Security Controls –> Session Settings (without this change you will be logged out completely after you logout as James Smith below).
Hi John,
I’m having the same issue using a trial account that another user had. I created James with the Salesforce User License as requested with a Standard User Profile. When I go to grant access I can only grant it to support. I have created a new user before with the actual system and tested things as a user so I know how to do this but otherwise this would have been frustrating. BTW – Overall great site so far.
Thanks for the heads up – I will need to investigate this… the new DE orgs may be spun with login as admin pre-enabled.
Updated this exercise, thanks
Hi John,
Looks like the ‘Enable Improved Setup User Interface’ is already checked. Why is it? would that be an org setting?
But it does make the site easier to see. What is the normal way?
This site was written before the new setup menu was released – hence the instructions to disable it. If you get a new org it will have it enabled, many old orgs will not have this enabled.
Hello,
When trying to create new lead, I do not have the option to do so. When I click Create New it gives me the following options:
Event
Task
Account
Contact
Report
Am I doing something wrong? I do see the black bar that says “Logged in as James Smith”.
Thanks.
Synthia
Look at what app you have selected – if you do not have the leads tab displayed, then create lead will not appear in the quick create menu. Try selecting the sales app – or go the leads tab from the all tabs menu (the plus mark at the end of the list of tabs) and select the leads tab.
Hi John – I managed to Log in as James & create the lead no problem without going through the stage where as James I grant myself login access. However, I decided to go through the motions of granting access, only to find “James” faced with an “insufficient privileges” error message.
He is set up as a standard user – should I just leave it as is, or is there a setting I should tweak now which I may need for future exercises?
Thanks
Standard should be fine for this exercise – where are you getting the error? If you were able to login as James and create the lead, then it is not a profile issue.
If the error came when attempting to login as James (from the administrator login), then that is a different permissions issues (I would double check that grant login access has been set up correctly from James’ account).
Never mind, found the solution, “James smith” has wrong profile.
Reassigned him to “sales” profile and “lead” field showed up.
I don’t see the lead option. When I click the + at the top, I have the option for Accounts, chatter, contacts, dashboards, documents, files, groups, home, ideas, people, profile, profile feed, profile overview, reports & Site.com… but no leads. What am I doing wrong?
Nevermind… I found the solution on my own. Thanks
Hi! Sarah,
Do you mind sharing how you found the solution? I got exact same thing as you got on your previous post and still looking for solution.
Apologies on the delayed reply. In order to ensure that your user has access to the tab, check the profile. The profile will need to grant access to read/create the lead object, and will cannot have the lead tab set to “hidden”.
Hey, I was having the same problem. I initially thought the same thing and checked the profile. However, I am now on the profile that james is using but when I type in “lead” using Ctrl + F, it’s found nowhere on the page.
Tab section not showing lead object: http://imgur.com/olQ5N1k
Make sure the profile you’re using is a “Salesforce” license type -you’re probably on a profile that doesn’t have access to the leads object for licensing reasons?
How do I logout as James Smith and return to system admin session? When I click logout, it logs me out completely.
You should get a dialog box that says Logged in as: James Smith in the top right- when that box is present, logging out should return you to your admin login session (unless there is some other changed setting that I am not familiar with).
I got same issue and was able to fix it by UN checking/selecting the
Force relogin after Login-As-User
under Session Settings
>>Setup>>Security Control>> Session Settings
Lock sessions to the IP address from which they originated
Require secure connections (HTTPS)
following Force relogin after Login-As-User – —-> do NOT check this
Require HttpOnly attribute
Use POST requests for cross-domain sessions
Thank you!! Exactly what I was looking for!
Awesome thanks J – haven’t had to change this one myself!
Oh. You are very welcome! Thank YOU for running the site.. it’s great to have a structured road map in this information overload era.
J. Shu / Jessica Shu
I didn’t find anything earlier that told me to uncheck the enhanced user interface. This resulted in about an hour of lost time, futzing around looking for this stuff that was supposed to be done in this scenario. This needs to be made really clear up front. I finally found it looking at some of the comments. You really need to fix this issue. It’s very frustrating and time consuming.
I do warn up front about that but yes I understand the navigational issue. I just haven’t quite found an ideal fix. If you have any ideas, I’m all ears!
Hi Shauntel,
At the end of all tabs bar in your application, you can see a little ‘+ ‘ sign. click on it, you will be able to see all hidden tabs and will also find, ‘leads’ tab in there.
Im not sure why, but when I log in as James Smith, the only tabs available are Home, Chatter, Accounts, Contacts, Reports and Dashboards. Even when I go to “create new” lead is not an available option. Would you happen to know why?
Hi Shauntel,
At the end of all tabs bar in your application, you can see a little ‘+ ‘ sign. click on it, you will be able to see all hidden tabs and will also find, ‘leads’ tab in there.
Hi Shauntel – this could also be caused by not setting up the user license or profile correctly; I would double check the user settings. Cheers,
John
Never mind: I just found it at the bottom of the profile.
Newly created lead says “Lead Owner: James Smith “.
I don’t see anything that says “Lead Creator.”
What am I missing?
hi,
when I log in as James, and attempt to grant login access – System Administrator is not an option, only salesforce support.
Thanks,
Jess
Hi Jess,
I would make sure James is assigned the correct profile and that the enhanced user interface is disabled (see comments above). Cheers,
John
I had this same issue when I was practicing step 2 – this happens if / after you enabled – step 1
1. You can grant login access to the administrator to all users. This setting may be enabled by default in newer orgs.
Navigate to Setup –> Security Controls –> Login Access Policies.
Check ‘Enabled’ next to ‘Administrators Can Login as Any User’.
Click Save
GO BACK AND UNCHECK ENABLE.
then the administrator will show up as an option – ( it did for me)
Thanks
RM
John,
Do you recommend we keep enhanced user interface disabled? If this would make it easier to follow along with your directions for the remainder of the training I would like to do so. If you believe it is a good idea could you post how to achieve this? Thank you for your assistance.
Hi Cooper,
Yes I do recommend disabling the enhanced user interface; this is now reflected in getting started:
Instructions within this guide make the assumption that the Improved Setup User Interface is disabled.
I suggest you double-check your org settings by navigating to Setup –> Customize –> User Interface; ensure “Enable Improved Setup User Interface” is not checked.
If you enable this feature, step-by-step instructions within scenarios and exercises will not line up correctly (as the setup navigation menus will be different).
Here are steps
Click John at the top right of the page
John>my setting>personal (left side of the page)>Grant Account Login access>Click Login next to James Smith.
With the enhanced user setup enabled? It may cause issues with other instructions in the guide…
I logged in as James (according to the email instructions) and could find no “My Personal Information”. The URL for James setup is https://na15.salesforce.com/ui/setup/Setup. Where is “My Personal Information” please?
Do you have the enhanced user interface enabled?
In this scenario, step 2 [As James Smith] is incorrect. It should be:
2. Your Name -> My Settings -> Personal -> Grant Account Login Access
Hi Amber – this is because you have the improved setup menu enabled; I’ve added language to address this, thanks!