Basic User Administration and Permission Sets
- Jane Chapola
- Wilmarié Moreland
- Mia Haughton
Basic User Administration and Permission Sets
Next, you’ll need to set up users and permission sets depending on user access requirements:
Initial System Settings for all Users who will be using Amp Impact
System Settings in Permission Sets are not enabled by default. Follow these steps to enable them.
Go to “Setup”.
In the Quick Search box, enter “Permission Sets”.
Click “New” to create a new Permission Set.
Set the label as “Amp Impact System Permissions”, and the API name should automatically render as Amp_Impact_System_Permissions.
(Recommended) Leave the “Section Activation Required?” checkbox and the License picklist blank.
Click “Save” to create the Permission Set.
After saving, scroll down and click “System Permissions”.
Select the following System Permissions as TRUE:
API Enabled
Create and Customize Dashboards
Create and Customize Reports
Create Dashboard Folders
Create Report Folders
Drag-and-Drop Dashboard Builder
Edit My Dashboards
Edit My Reports
Export Reports
Manage Dynamic Dashboards
Report Builder
Run Reports
View My Team’s Dashboards
The above list can be customized based on what the User(s) needs to access in regards to Reports & Dashboards and running Apex batches for Aggregated or Calculated Indicators.
Access for Users who need full access to Amp Impact Objects (Amp Impact Admins)
After installing Amp Impact, follow these steps to ensure your users with Admin rights for Amp Impact have access to the Amp Impact Admin Permission Set.
Go to the “Setup”.
In the Quick Search box, enter “Permission Sets”.
Select the “Amp Impact Admin” Permission Set.
Click the “Manage Assignments” button.
Click the “Add Assignments” button.
Select all relevant users that should have access to the Amp Impact Admin Permission Set and click “Assign”.
For users who will be creating Project Geographic Area records, System Admins must grant the Edit access to the ampi__Exclude_from_IATI__c field from Setup.
The Amp Impact Admin permission set does not contain permissions to either the Project Role or Organization Role objects, as there is a Salesforce limitation in which permission sets in managed packages cannot provide access to custom objects that are “detail” to standard Salesforce objects in a master-detail relationship.
To provide access to either of these objects, create a new permission set (or modify an existing unmanaged permission set) and add both the object and field permissions manually through Object Settings. Assign this new permission set to any users who require access to Project Role and Organization Role.
Access for Users who need limited access to Amp Impact Objects
For other Amp Impact app users who are using the tool for data entry, for example, create a new permission set to grant them limited access.
Go to the “Setup”.
In the Quick Search box, enter “Permission Sets”.
Clone the “Amp Impact Admin” Permission Set.
Based on the user profile, edit the permission set by removing any permissions that are unnecessary for the user to use Amp Impact.
For users interacting with Amp Impact custom UI, ensure that Apex class access is provided for any class ending in “_CTRL” for the relevant functionality (e.g., add access to ampi.AddResults_Ctrl for a user entering data on the Add Results Visualforce page).
Once the permission set has been customized per the user profile, assign the permission set to the relevant user(s) by clicking “Manage Assignments”.
If specific permission requirements are determined during configuration (e.g., restriction of certain edit privileges), the System Admin may need to modify/clone this permission set or modify user permissions on an individual profile level to achieve these requirements.
Additionally, certain permission and sharing setups (i.e., restricting “create” access for certain objects for some user groups, make individual tabs available but not the entire app) may require the System Admin to make additional changes to existing user permissions & record sharing setup leveraging the standard Salesforce platform security & sharing features.
Amp Impact Reports Access
The “Amp Reports” folder contains pre-configured Reports for Amp Impact users. Share this folder to grant users view/edit/manage access to the report content or create and share new report folders.
To share the folder with other users, navigate to the “Reports” tab, and click on the folder “Amp Reports.”
Select the pin next to the folder name and click Share.
Then share with desired users.
