Access Salesforce.com only through a Salesforce.com API.
Assign existing topics to feed items. Remove topics from feed items.
Create Apex classes and triggers.
Delete records in the Bulk API without storing them in the Recycle Bin.
Use all Chatter features.
Allows a user to connect this organization to an Environment Hub.
Create, edit, and delete dashboards in personal folders.
Create list views; modify and delete own list views.
Create, edit, and delete reports in personal folders.
Create and own new Chatter groups.
Create communities, manage community-wide settings, membership, login and registration, branding, and associated Site.com site.
Share a Chatter file with anyone by creating a file link and sending it via email or IM.
Create, edit, and upload outbound change sets.
Create packages that can be distributed through AppExchange.
Create dashboard folders and manage these folders if sharing rights allow.
Create report folders and manage these folders if sharing rights allow.
Create new topics by assigning them to feed items.
Customize the organization using App Setup menu options.
Delete topics and remove all corresponding topic assignments from feed items.
Deploy inbound change sets.
Install or uninstall AppExchange packages as system administrators.
Create, edit, and delete dashboards through the drag-and-drop dashboard builder interface.
Create, edit, and delete events.
Create, edit, and delete HTML email templates.
Edit, move, save, and delete user's own dashboards in shared folders.
Edit, move, save, and delete user's own reports in shared folders.
Edit fields that are read only due to page layouts or field-level security.
Create, edit, and delete tasks.
Edit topic names and descriptions.
Provides an option to use email to confirm identity, even if the user has a verified phone number.
Use Export Details and Printable View to export reports.
Set the author or creation date for a Chatter post or comment.
Invite Customers To Chatter
Create, edit, and delete analytic snapshots.
Create and edit Auth. Providers
Access all users' messages sent in Chatter.
Access Community Management to view community dashboards and set up Reputation point system and levels.
Manage, create, edit, and delete connected applications.
Create, edit, and delete custom report types.
Create, edit, delete dashboards, and manage their sharing in all public folders.
Create, edit, and delete data categories.
Monitor or abort Bulk API jobs.
Create, edit, and delete dynamic dashboards.
Create, edit, and delete Outlook configurations for Salesforce for Outlook.
Create and edit Force.com Flows.
Create, edit, and delete letterheads for HTML emails.
Access Salesforce Classic features.
Manage package licenses in subscriber organizations.
Create, edit, and delete folders for public documents.
Create, edit, and delete public list views.
Create, edit, and delete text emails, mail merge templates, and folders for public email templates.
Create, edit, delete reports, and manage their sharing in all public folders.
Edit multiple records simultaneously from a list with inline editing.
Send mass emails to contacts and leads.
Deactivate Chatter Free users, assign moderator privileges to Chatter Free users, and remove posts.
Moderate Chatter Feeds in communities
Moderate Chatter Files in communities
Create, edit, and delete all organization data, regardless of sharing settings.
Prevent the user's password from expiring.
Create, edit, and delete reports through the drag and drop report builder interface.
Reserved for future use.
Run flows.
Run reports and dashboards.
Schedule when dashboards refresh, and send email notifications that include refreshed dashboards in HTML format.
Run reports in the background, and export results as a CSV or Excel file on completion.
Send email to a single contact or lead.
Send outbound messages to an external Web service API.
Display a custom sidebar on all pages in Salesforce.com.
( in some circumstances. It does restrict the ability to do a lot of business processes based on record visibility)
Change the owner of most records.
Require users to enter a time-based token instead of the emailed security token in the API.
Require users to enter a time-based token during login.
Upload packages to AppExchange for distribution.
Gives the user access to Identity features such as App Launcher.
View all organizational data, regardless of sharing settings.
View and access dashboards in public folders, which does not include others’ personal folders.
View the Data Categories page.
View the value of encrypted fields in plain text.
View the global header to switch between apps and communities and access personal setup and customization options.
Allow user to view help link.
View dashboards owned by people under them in the role hierarchy.
View and access reports in public folders, which does not include others’ personal folders.
View the App Setup and Administrative Settings pages.
Run the weekly data export service.
Users
Permission Name
Partners Have it
OK for Partners to not Have
Description
Assign permission sets to users.
Create and edit internal users.
Create, edit, and delete trusted IP ranges.
Specify the login access policies that apply to administrators and support organizations.
Set password restrictions and login lockout policies for all users.
Create, edit, and delete profiles and permission sets.
Create, edit, and delete roles.
Manage sharing configurations, including organization-wide defaults.
Create, edit, and deactivate users, and manage security settings, including profiles and roles.
Unlock users whose accounts are locked, and reset user passwords.
(They have this in Sharing Settings)
View all users, regardless of sharing settings.
App Permissions
Call Center
Permission Name
Description
Edit their own case comments but not other user's comments.
Import solutions for the organization.
Create, edit, and delete business holidays.
Create, import, edit, and delete a call center configuration.
Administer case settings, including Email-to-Case and mass transfer of cases.
Define and modify solution categories settings.
Create, edit, and delete publicly accessible solutions.
Change a case's owner.
Content
Permission Name
Description
Create Salesforce CRM Content libraries.
Enables non-Content users to create content deliveries, and enables Salesforce CRM Content users to create content deliveries using documents in their personal library.
Create, edit, and delete library permissions in Salesforce CRM Content.
Create, edit, and delete custom fields in Salesforce CRM Content.
Create, edit, and delete content types in Salesforce CRM Content..
Create, edit, and delete libraries and library memberships.
View Content in Portals
View Salesforce CRM Content from a portal.
Partner Relationship Management
Permission Name
Description
Restrict what IP addresses can access in the PRM Portal.
Create partner accounts and partner users.
Delegated External User Administration
Manage portal users who belong to the same portal account.
Sales
Permission Name
Description
Change contract status to Activated.
Approve or reject a contract from a related list.
Convert leads into accounts, contacts, and opportunities.
Delete contracts, regardless of their status.
Change the sales price on opportunity line items.
Import leads and update campaign history.
Import personal accounts and contacts.
Change the status of multiple leads in a list view.
Send Stay-in-Touch update emails.
Change a lead's owner.
Mass reassign account team and opportunity team members.
