Introduction
The Android application in the field communicates with the Salesforce database in the back-end via the Partner Community feature. In this part of the configuration you will grant permissions and choose settings for how your field officers will use access TaroWorks via a Community. This article details the step-by-step instructions for configuring your TaroWorks Partner User profile in Salesforce.com. The following topics will be covered in this article:
- A. Configure Field-Level Security - Ensures your field officers can access TaroWorks features.
- B. Add Administrative Permissions
- C. Configure Object Permissions - Grants this profile access to critical objects needed to use the TaroWorks app. In addition to the permissions mentioned below, you will need to grant access to other custom objects for your data structure.
- D. Set Session and Password Policies - Salesforce gives you the ability to set security policies for your field officers. It is possible to increase security by timing out sessions quickly and enforcing a high strength password.
- E. Enable Apex Class Access - Apex is a programming language used to add business logic to applications such as TaroWorks in Salesforce.
- F. Enable Visual Force Page Access - Visualforce is a framework that allows developers to build sophisticated, custom user interfaces for applications such as TaroWorks.
Before you Begin:
- Complete steps in Article 01 through 05 of this series.
- Log in to Salesforce as a System Administrator.
A. Configure Field-Level Security
- Click Setup in top right corner.
- Navigate to Administration Setup > Manage Users > Profiles.
- Click on TaroWorks Partner User.
- Under Custom Field-Level Security click the View link next to Answer.
Note: It may be easier to open the View link in another browser tab (Right Click) as you will need do this many times. - Click Edit.
- Check all the boxes in the Visible column.
- Click Save.
- Click Back to Profile or just close the tab if you opened a new tab for this.
- Repeat the above steps, and make all the field visible for the following objects:
- Answer
- Application Version
- Assigned Target
- Cascading Select
- Cascading Select Values
- Client Assignment
- Device
- Groups
- Job
- Job Activities
- Member
- Mobile User
- Object Relationship Mapping
- Options
- Performance Target
- PPI Table
- PPI Table Data Set
- PPI Table Line
- Question
- Question Mapping
- Score Value
- Scoring Group
- Skip Condition
- SObject Filter Condition
- SObjects Contact Association
- Submission
- Submission Score
- Submission PPI Value
- Survey
- Survey Library
- Survey Mapping
- Survey Version
- Target
- Task
- Task Activity
B. Add Administrative Permissions
- Continuing from A, click the Edit button at the top.
- Check API Enabled under Administrative Permissions.
C. Configure Object Permissions
- Scroll down to Custom Object Permissions.
- Proceed to mark the checkboxes according to this table:
OBJECT Read Create Edit Delete Answers ✔ ✔ ✔ Application Version ✔ Assigned Targets ✔ ✔ ✔ Cascading Levels ✔ Cascading Selects ✔ Cascading Select Values ✔ Client Assignments ✔ Devices ✔ ✔ ✔ Groups ✔ Jobs ✔ ✔ ✔ Job Activities ✔ ✔ ✔ Members ✔ Mobile Users ✔ Object Relationship Mappings ✔ ✔ ✔ Options ✔ Performance Targets ✔ ✔ PPI Tables ✔ PPI Table Data Sets ✔ PPI Table Lines ✔ Questions ✔ ✔ Question Mappings ✔ Score Values ✔ Scoring Groups ✔ Skip Conditions ✔ SObject Filter Conditions ✔ SObjects Contact Associations ✔ Submissions ✔ ✔ ✔ ✔ Submissions PPI Values ✔ ✔ ✔ Submission Score ✔ ✔ ✔ Surveys ✔ ✔ ✔ Survey Libraries ✔ Survey Mappings ✔ Survey Versions ✔ ✔ Targets ✔ Tasks ✔ ✔ ✔ Task Activities ✔ ✔ ✔ - To add permissions (usually Read, Create, Edit) to other objects that the field staff need access to check the boxes accordingly. For example if you plan for them to register farmers, then they should have at least Read and Create permissions on the Farmer object.
NOTE: Salesforce may limit you to a number of custom objects to enable for this profile. (Usually ten custom objects not already in a managed package.) You may find that cloning your profile later helpful.
PART D: Set Session and Password Policies |
D. Set Session and Password Policies
- Continuing from C, while still editing, scroll to the Session Timeout section.
- Set Timeout value to 12 hours.
- Set User passwords expire in to "Never Expires".
- Set Enforce passwords history to "No passwords remembered".
- Set Minimum passwords length to "5 characters".
- Set Passwords complexity requirement to "No restriction".
- Set Passwords question requirement to "Cannot contain password".
- Set Maximum invalid login attempts to "No Limit".
- Set Lockout effective period to "15 minutes".
- Click Save.
E. Enable Apex Class Access
- Under Enabled Apex Class Access, Click Edit.
- Enable the Apex Classes below by listing the class in the Enabled Apex Classes box. To move a class, select the item from the Available Apex Classes box, then click the Add button.
- Enable the following Enable Apex Classes:
- gfsurveys.ApplicationUpdate
- gfsurveys.CascadingUploadBatch
- gfsurveys.ExportCsvBatch
- gfsurveys.FFSubmitJobs
- gfsurveys.JobTargetCleanUpBatch
- gfsurveys.JobTargetCleanUpSchedule
- gfsurveys.MobileUserLogin
- gfsurveys.MobileUserLoginTest
- gfsurveys.MobileUserLogout
- gfsurveys.PerformanceIndicatorsCalculatorBatch
- gfsurveys.PerformanceIndicatorsCalculatorSchedule
- gfsurveys.PerformanceManagementEndpoint
- gfsurveys.PostInstallScript
- gfsurveys.PostInstallScript_010400MoveXFormsToVer
- gfsurveys.PostInstallScript_011000MoveAnswerText
- gfsurveys.RemoteActionUtils
- gfsurveys.ResourceDownload
- gfsurveys.SFDCEncoder
- gfsurveys.SObjectContactAssociationDO (ignore if not visible)
- gfsurveys.SiteUrlRewriter
- gfsurveys.SkipConditionTriggerLogic
- gfsurveys.SurveyDistribution
- gfsurveys.SurveyFormList
- gfsurveys.SurveySubmissionService
- gfsurveys.SurveySubmissions
- gfsurveys.SurveyTriggerLogic
- gfsurveys.TaroRESTJobTemplates
- gfsurveys.TaroRESTJobTemplatesLogic
- Click Save.
F. Enable Visualforce Page Access
- Under Enabled Visualforce Page Access, click the Edit button.
- Enable the Visualforce Pages below by listing the class in the Enabled Visualforce Pages box. To move a page, select the item from the Available Apex Classes box, then click the Add button.
- Enable the following Enable Visualforce Pages if they are not enabled already:
- gfsurveys.ApplicationSettings
- gfsurveys.ContactGroupList
- gfsurveys.CreateCascadingSelect
- gfsurveys.CreateIndicatorTarget
- gfsurveys.CreateJobTarget
- gfsurveys.CreateJobTemplate
- gfsurveys.DeleteContactGroup
- gfsurveys.DeviceMassActivate
- gfsurveys.DeviceMassDeactivate
- gfsurveys.DeviceMassDelete
- gfsurveys.DownloadCsv
- gfsurveys.EditContactGroup
- gfsurveys.JobActivitesList
- gfsurveys.LookupTables
- gfsurveys.MobileUserDetail
- gfsurveys.ObjectAssignment
- gfsurveys.PerformanceIndicatorManager
- gfsurveys.PerformanceTargetManager
- gfsurveys.Submission
- gfsurveys.SurveyBuilderTemplate
- gfsurveys.SurveyFieldMapping
- gfsurveys.SurveyGroupAssignment
- gfsurveys.SurveyManager
- gfsurveys.SurveyQuestion
- gfsurveys.SurveyQuestionLogic
- gfsurveys.SurveyResult
- gfsurveys.SurveyScoring
- gfsurveys.TemplateManager
- gfsurveys.ViewGroup
- gfsurveys.createSurvey
- gfsurveys.editXForm
- gfsurveys.exportXForm
- gfsurveys.surveySetting
- Click Save.
Conclusion
Congratulations, you have setup the profile for your field officers. Keep this page handy, as you might need to return and modify the profile to suit your needs. You may also choose to clone this profile and then edit it. Giving different profiles to different team is helpful in many situations.
Please continue on to the next step of your upgrade: 07. Create Partner Account
Comments
0 comments
Please sign in to leave a comment.