Salesforce Admin Interview Questions
Salesforce Admin Interview Questions
1. What is a Profile?
Profiles and Roles work together to determine which records users can see and what
they can do with them. Profiles are always required and control which objects and fields
users can access. They also determine whether users can create, edit, or delete
records.
Roles also have a hierarchy like an organization chart, so that the sharing can cascade
beyond records users need, but also for managers to access their team’s records.
They reduce the overhead for Administrators in that way. It’s useful to think of Profiles
as the base set of permissions that many users have in common while Permission Sets
are the “extra” permissions that fewer users need.
A common use case is to share records to users of a similar level, say Directors. As
there are probably Directors spread throughout the organization, they aren’t likely to be
under each other in the Role hierarchy, but an Admin could create a Public Group with
all of the Director Roles in it and share records to the group.
Data Modeling
6. What is a lookup relationship?
A lookup relationship allows you to relate records to each other, creating a parent-child
schema. Generally, this is done between the different objects (such as Accounts and
Contacts), but it can be one object (such as Parent Accounts). Relationship fields allow
for users to specify how records affect each other and help with reporting.
For example, if you don’t want a user to mark an Opportunity as Closed Won if the
Account doesn’t have a Billing Address. You can add a Validation Rule so that when a
user tries, it won’t update the Opportunity record and displays an error message
explaining what they need to do.
Read More: Create Validation Rules Trailhead unit
11. What if you need roll-ups on a lookup relationship?
Sometimes you’d like to aggregate child data on a parent record, but you can’t use
Master-Detail due to the security limitations not aligning with your use case. In those
situations, you could write code or use Flow Builder to replicate the functionality of Roll-
up Summary fields.
Most likely, however, you’ll want an app from the AppExchange to make configuration
easy. In fact, an app like this is one of the first things you should look to install in your
org (in a sandbox first, of course.)
Read More: Rollup Helper or Declarative Lookup Rollup Summary (DLRS)
12. What is a junction object?
A junction object is a term to describe an object that is designed to have two different
parent objects (generally with Master-Detail relationships) which forms a many-to-many
relationship. There is nothing labeled “junction object” within Salesforce; it’s a definition
applied to an object based on its function in the data model.
A common use case is something like Classes in a school. The school will offer many
Courses and have many Students. Each of those will be connected to many Classes.
Process Automation
13. What is workflow?
Workflow is a basic automation tool that allows Admins to trigger an action (such as
updating fields or sending emails) when a certain data condition exists. They are the
simplest type of automation to implement and also the most limited.
Finally, Flow is the only declarative automation tool that allows admins to build custom
screens to interact with users and can greatly improve the user experience in Lightning
(which is required for Screen Flows.)
Communities
18. What is a Community (Experience Cloud)?
A Community is a way that you can allow your customers and partners to access your
Salesforce org. With these special licenses, they can have user accounts and a special
access portal, customized with a bevy of Lightning features that are able to be
configured without any code. It’s also very simple to layer in security so they can only
see or edit the objects and records you want them to.
Naturally, there are a lot of considerations and limitations to evaluate, but leveraging
this feature can solve a lot of use cases and do it economically as guest user licenses
are free. Take a look at how the National Aquarium leverages guest users licenses to
allow constituents to manage email preferences.
Read More: Guest User Profile help article
AppExchange
20. What is the difference between managed and
unmanaged packages?
Applications you install from the AppExchange are in the form of packages — a
collection of all of the elements required to make the app function correctly. The creator
of the app decides whether the package is managed or not.
At a high-level unmanaged packages, once installed, behave like things you have
created yourself in the org, whereas components of managed packages are locked
down from being edited kind of like apps you install on your smartphone.
Chart source
Read More: AppExchange Basic Trailhead module
Change Management
21. What is a Change Set?
While not exactly the same as an AppExchage package, a Change Set is quite similar.
It’s a collection of components that you want to migrate between related orgs (generally
from a sandbox to Production, but also sandbox to sandbox, and other configurations.)
User Experience
23. What are Record Types?
Record Types allow you to create separate kinds of records for each object. They
control the page layouts, picklist values available, and other business logic. A good
example is a call center. You’d likely need different fields visible and required for Cases
involving customers’ mortgages compared to car loans.
Here’s a tip: I almost always create a Record Type when I make create a new object
even if I’m only planning to use one type. It’s so much easier to add a second one when
you need them than it is to to go back an introduce Records Types to an object that
already has records.
It’s worth noting that now Dynamic Forms have been released, this will represent a
paradigm shift in managing Lightning pages and page layouts!
Read More: Page Layouts help article
27. What are Lightning Components?
Lightning Components are where the magic of Lightning Experience really comes alive.
They are modular features than can be added, moved, or rearranged on Lightning
Pages. They are the Record Details, Chatter elements, Highlights Panel, Path display,
etc. There are dozens of standard Lightning components and you can also create your
own custom Lightning Components or get them from the AppExchange.
Read More: Lightning App Builder Trailhead module
28. What is the difference between a page layout and a
Lightning page?
In Lightning Experience page layouts are basically represented by Lightning
Components that display its content (mostly the Details and Related List components),
but Lightning Record Pages house so much more!
The Lightning Page controls all of the other Lightning Components you can leverage.
You can also make all of the components conditionally visible. The conditions can be
based on things like the user’s profile or data in the record.
There are other types of Lightning pages too: Home pages and App pages. Those
pages won’t have any individual records, but could enhance the user experience by
containing things like charts, list views, Lightning Screen Flows, and more! The limit is
almost anything you can think of to make things better for your users. You can even
make Lightning Pages function differently between desktop and mobile instances.
Read More: Embed Dashboards and Report Charts on Lightning Pages
Trailhead module
Data Management
29. What is the Data Loader?
There are a lot of ways to import and export data in bulk from Salesforce (including
Import Wizard, exporting Reports, and third-party tools such as dataloader.io), but
the Salesforce Data Loader is the original. It’s a downloadable client application that is
free and provides all of the options you need.
Read More:: Data Management Trailhead module
30. What is a Custom Metadata Type?
Once a tool primarily for Developers, Custom Metadata Types have increasingly
become useful for Admins. Custom Metadata is kind of like a custom objects, but rather
than store data for your organization, it’s data about your organization.
Things like discount rates, blackout dates, sales goals, etc. are good uses cases. The
metadata becomes available to you in formulas, automation, etc. Also, because it’s
metadata and not data, it’s automatically available in all sandboxes you create or
refresh.
Q1) What is Salesforce? Cloud computing and benefits?
Salesforce is a powerful CRM (Customer Relationship Management) tool that works on cloud
computing technology.
Cloud computing: Technology in which the applications are hosted somewhere (simply called on the
cloud) and users can access those applications from anyplace without installing it.
Cloud computing provides:
There are many architectures available like Client server architecture, Standalone architecture etc.,
Salesforce uses MVC architecture i.e., Model View and Controller Architecture.
Model – It deals with Database designing like Table, fields creation, data types etc.,
View – It deals with UI (User interface) customization like Page layout, designing of the page etc.,
Controller- It controls the data flow between Model and view.
You can use Point and click tools like Workflow, approval process, process builder etc., to achieve
the control or you can use Apex programming like Classes and triggers.
Design of Database,
Table, fields etc.,
Multi- tenant means shared by many. Since, Salesforce is a cloud tool and millions of users are
using it at a time. In order to avoid mono-poly (influence of single or group of users) on cloud
Salesforce provides limits for all functionalities and those limits are called Governor Limits.
Owner
CreatedBy
Last ModifiedBy
Custom fields – Custom fields are user created fields and we have various data types to be
selected while creating a field. Some of them are, Text, number, phone, email, decimal etc.,
You can restrict access to the fields for the users using field level security. You can make a field
required or read-only, hidden by using field level security.
Page layout is a user interface customization. You can organize buttons, links, fields, related lists,
visual force pages and quick actions etc., using page layout. To create a new page layout,
go to,
Setup-> customize\create-> objects->select an object->pagelayout.
You can customize the contents of a page for different users using pagelayout.
Record types: By default, you can have only one page layout per profile, if you want to have more
than profile then you have to use record type. It provides different business processes, pick-list and
page layouts for users.
Roles controls Records (RR). They are used to control records in salesforce. Each user is assigned
with one role. No such configurations like profiles are required for roles. It works with Hierarchy but
you need to setup hierarchy for roles.
To setup roles level hierarchy. Go to,
Setup-> Manage Users-> roles.
For example,
Top level role like manager can see all his bottom level roles records.
With Role hierarchy, manager role gets record level access for all his below user roles.
A basic requirement for a user creation is profile without selecting a profile user level creation is not
possible as it is used specifies all the basic information\ permissions to object, fields, apps, tabs,
apex class, visual force pages, record types, login hours, ip ranges.
A profile is a collection of permissions and settings for users in Salesforce. A user can have only one
profile at a time but one profile can be assigned to any users.
To create a profile, go to,
Setup-> manage users-> profile->new profile.
A permission set is similar to profile as it is also used to provide permissions to users. If you want to
give any specific permission to few users with same profile, then you can use permission set.
Permission set is used to extend the permission for particular users with same profile.
In an organization, if a user record needs to be shared to other users then we can use
sharing setting. The record can be set as private, public read-only or public read-write. The access
are of two type, external access and internal access.
If the external access is set a private, then the customers, portal users cannot see the
objects records, they can see only their own account records.
If the internal access is set a public read-only then internal user can view that user data.
If the internal access is set a public read-write then they have full access to the records.
Many – to – Many
Apart from this we have self – relationship (creating a relation to that object itself)
These relationship can be achieved by
Look-up relationship.
To establish a relationship between two objects to get the records from one object to another using
look-up field. This relation is not so strongly bounded like master – detail. You can have upto 40
relationship per object.
It is a very strong relationship between two objects. The child object (sharing of record\owner ) is
completely dependent on parent object. If the parent is deleted then all its associated child’s will be
automatically deleted. Roll-up summary is available in master detail relationship.
We can have maximum of 2 master detail relationship per object.
A roll up summary is used to calculate the values of the child records and displays in the parent
object as a read – only field. You can sum, count, minimum and maximum the values of the fields of
child object.
A report is a list of records displayed with certain criteria that users define. The records can be
grouped, filtered and sorted based on requirements. We have 4 types of reports they are,
Tabular format
Matrix format
Summary format
Joined Format
T0 create a report we need to keep 5 things in mind.
Report Type – (template, simply object or related objects that you want to create a report).
Fields – fields in the objects you want to display in the report.
Filters – we have many filters like Field filter, cross filter, row limit, logic filter.
Folder – after creating a report you can save it in a public folder or you can create a folder.
A Dashboard is the graphical portrayal of the information produced by a report or different reports.
Dashboard part types can be graphs, tables, measures, measurements, or different segments that
you can make with Visual Force.
Dashboard has two primary things, information source and segments
Information source is the report that you need to show graphically
Part is the kind of graphical portrayal like diagrams, table and so on.
We can have most extreme of 20 dashboard in a solitary dashboard board.
Work flow and approval process are simply point and click tools to automate your business logic
without writing any code. When ever a record is inserted or updated in an object, you can perform
certain actions using workflow rule.
The actions in work flow and approval process are,
New task
Email alert
Field update
Outbound message.
The main different between workflow and approval process is,
In Workflow, action is carried out based on the criteria the user has provided but in approval process
the action is based on the approver.
The things to keep in mind while creating work flow is
Object – name of the object that you want to write workflow
Criteria – we have rule criteria and evaluation criteria
Action- choose any on the four action shown above.
In approval process we need to keep in mind,
Object – name of the object
Criteria – criteria if anything needed
Approver – approver has to be selected for approving the record, based on the approver only the
action is performed.
Action – Select anyone from above four.
We can have up-to maximum of 10 actions in a single workflow.
Q19) What is process builder and difference between process builder and workflow?
A process builder is a tool to perform automation without code whenever a record is created or
updated. It is similar to workflow but it has more advantages than work flow.
Using process builder, you can perform various actions like,
Post to chatter
call a flow
Email alert
Quick action
In workflow, we can only update records from child to parent but in process builder both child to
parent and parent to child record update are possible.
We can have a control over order of execution using process builder.
Disadvantages:
• Even though process builder is very better than workflow but it has few disadvantages like
• Deleting a record is not possible.
• You can update a record in the objects that are in relationship.• Outbound message action is not
available in process builder.
Validation rules are used to validate the data based on the formula or criteria that a user provide.
Before saving a record into the database, the validation rule checks whether the entered data is
correct or not based on the user given criteria.
To create a validation rule, go to
Setup-> object-> click validation rule.
Q22) What are the ways to store images files and documents in Salesforce?
Static resources allows us to store the images, gif, css files, jave script, jar files and also in zip
format that are used in visual force page. A single file should be less than 5MB and an organization
is provided with maximum of 250 MB size.
• A import and export wizard are used to upload or download records from Salesforce. You can
process upto maximum of 50,000 records at a time. If you want to process more than 50, 000
records then you can use data loader.
• In data loader you can process upto 5 million records.
• The only tool in Salesforce where you need to install in your pc to use it is data loader.
• If you want to perform more than 5 million records then you need to use some third party tools like
apex data loader, jitter data loader etc.,
Q25) How the release in Salesforce works? What are the releases? What is AppExchange?
Generally, Salesforce has 3 major releases every year i.e., every four months once. They are
Spring – around the month of February.
Summer – around the month of june.
Winter – around the month of October.
AppExchange is the market place to get the managed packages(applications) for Salesforce. Similar
like play store in android.
Q26) How to customize the Standard application Label & Logo in Salesforce?
We cannot customize the standard application label & logo. We can only customize the custom
application log & label.
Q27) Can we change the assigned Custom object to Custom Object Tab once it got created?
There is no option to change the object that is assigned to tab once it got created.
Q28) In many-to-many relationship, in which scenario user can’t delete a parent Record?
Parent record is having more than 200 junction record associated with it.
Junction record which is associated with this parent record is having rollup summary field that rollup
to another parent.
By enabling “Grant Login Access” for particular user. We can see “login” button under user detail
page of that user.
Connected App is created in situation where external application wants to connect with our
salesforce organization.
Example: When external application wants to make Rest Call to Salesforce Org.
Q32) How many login history records we can track using Login History in Setup?
Q33) If a user grants login access to an admin and the admin makes a setup change, how we can track it?
In setup, we can download setup audit trail, where we can see the user name who made the
changes in Delegate user columns.
Q34) How to set name that will appear on your outgoing Email from Salesforce?
Go to Email setting from the My Personal information and set outgoing Email Name.
By setting this value, any outgoing Email from Salesforce org will have this name associated with
Email id.
Q35) How to prevent deletion of Parent record if there is related child record present in lookup relationship?
While creating lookup relationship, we can define this under “what happens when parent record gets
deleted” section.
We can set default value for controlling picklist but not for dependent picklist.
Q37) When we convert existing picklist to controlling or dependent picklist what happens to the existing
record?
When we convert existing fields to dependent picklists or controlling fields, it doesn’t affect the
existing values in your records. After conversion, the dependency rules apply to only new records
and to any changes to existing records.
Q38) Can user who don’t have “View Encrypted Data” permission edit the Encrypted field?
Encrypted fields are editable regardless of whether the user is having the “View Encrypted Data”
permission.
Q39) Can we create Detail Record in Master Detail Relationship without associating master Record?
No. We can’t create detail record without associating master record. One master record can be
associated with multiple child.
Q40) What are the fields are available when you select sum as the roll-up type?
Q41) What are the fields can be inserted into formula editor while creating formula field?
Global Variable, Hierarchical Custom Setting, Objects and related parent objects.
Q42) What is the functions which is used in Validation Rule for checking whether newly created record or not?
Q43) How to assign the particular record type case to particular owner automatically without using Assignment
Rule?
We can create workflow rule and define every time record is created.
Give criteria using record type and use field update action for updating owner field.
We can only access and update parent record fields if it is in master detail relationship.
Q45) How to send message to External system from salesforce upon updates to salesforce Records?
Q46) What happens to the record which is pending to execute in Time Based workflow Queue when record is
changed from meeting criteria to not meeting criteria?
Pending action is removed from timed based work flow queue. It will not get executed.
How to make currently assigned approver to edit the record once it is submitted for approval
Process?
o While creating the approval process we can enable this permission.
Q47) In one Profile, For Custom object Student__C edit permission is not given. How can we enable edit permission
for only 3 user in that profile without modifying the Profile?
For extending the permission that we gave in profile, we can use permission set. We need to create
new permission set and give edit permission and add those user to this permission set.
Q48) What are the Report Formats is available for creating Dashboard?
Summary and Matrix Report. Tabular and join report is not available for creating dashboard.
Q49) Give me the Scenario where we need to create Custom Report Type?
Scenario where we need to create entirely new report type by adding objects and specified fields.
Q50) User A wants to give edit permission for his Case Record to User B (Who is having only Read Permission),
how User A can give Edit permission to User B?
Manual Sharing
Q51) Can we modify “Grant Access Using hierarchies” feature of Standard object?
No we can’t modify for standard object. We can only modify for custom object.
Q52) In OWD, Case object sharing setting is Private. How to enable Edit permission for only Specific Profile
Users?
Sharing Rule
Q53) How to make the field required in the UI Level and not required in the API or Code level?
No. We can’t add one queue into another queue. But one public group can have another public
group.
Public group can’t be direct owner of the record. We can add public group to queue and queue can
be the owner of the record.
Q58) How to restrict the user from logging in from specific IP Address?
We can add IP address in profile level. So those profile can only login to org specified in the IP
address specified at their profile level.
Q59) How to extract the string that is present after “@” in email field and store in different field of same record.
How can we achieve it using salesforce declarative approach?
Create Formula field in salesforce and achieve it by using substitute, left and Find function.
SUBSTITUTE(Email, LEFT(Email, FIND(“@”, Email)), NULL)
Trusted IP Ranges define a list of IP addresses from which users can log in without receiving a login
challenge for verification of their identity, such as a code sent to their mobile phone.
Q61) I have one requirement where all users in salesforce Org has to send mail using same From Address in the
Email. This from Address should be available to all users in org when they send any email from salesforce. How can
I achieve this?
For this requirement, you can define a organization-wide addresses for all user profile.
Q62) I contacted salesforce for clarifying some challenges that I face in my org. Salesforce team is asking for Org
id. How I can find out?
Q63) What is the different between transferring the record using mass transfer and sharing the record using sharing
rule or manual sharing?
While transferring the record ownership of the record gets changed. But while sharing the record
ownership is not changed, we are just giving permission to other users on our record.
Q64) While importing data using data loader whether it follows allornone approach?
Data loader doesn’t use allornone approach. If one record gets failed in 100 records, remaining 99
records will get processed.
Q65) When manual sharing button is visible to user in Record Detail Page?
We have to enable it in OWD sharing setting. OWD for object should be private/public readonly.
And it should pass any of the below condition:
Administrator, Record owner, User above in role hierarchy of record owner, User granted with full
access sharing.
Q66) How to create new field that is used for categorizing based on existing record field values and it should be
available only in report and not in object definition?
Q67) When user clicks on the link available in the Detail page, it should redirect to Edit page of the record. How we
can implement this. ?
We should not use standard Edit button for redirecting to Edit page of the record.
Q68) We have one text field with more than 255 characters. Field tracking is enabled for that. User updates that field
to new value. Can we see old and new value in Field History?
Any Changes to fields with more than 255 characters are tracked as edited, and their old and new
values are not recorded.
Q69) Is there any option that is available in salesforce for arranging the picklist values alphabetically?
After adding the picklist value in Salesforce. We can arrange it using Arrange picklist values
alphabetically in Picklist Field Definition Page.
Q70) Whenever opportunity record is created or edited with amount greater than 10,000. Salesforce has to
automatically send mail to specific group of recipients. How can we achieve this?
Create Workflow Rule with Evaluation criteria “every time record is created and edited to
subsequently meet the criteria” and add Rule criteria opportunity amount >= 10000.
Add Send Email Alert action for sending the mail and add Email template for formatting the Email.
Q71) What is the difference between deactivating and freezing the user?
When we freeze the user, user loses all permission. User won’t be able to login to salesforce. But
still License is assigned to the user.
When we deactivate the user, license also removed for that user.
Q72) What is the difference between Export and Export All in Data loader?
Export doesn’t takes data from Recycle Bin. But Export all takes data from Recycle pin as well.
Q73) What are the fields can be used for mapping while upserting the record in Salesforce?
Salesforce id or field with External id can be used for mapping while upserting the record in
salesforce.
73. How can you change the setting “Grant Access Using Hierarchies” for
Standard Objects ?
It is not possible , by default Grant Access Using Hierarchies options are enabled
for standard objects and they can not be changed.For custom objects we can
change “Grant Access Using Hierarchies “settings .
74. What are the Mandatory points that you think while creating User and Role ?
It’s Profile.
75. While setting OWD (Organization wide sharing), can we change/modify the
setting of child record in case of Master-Detail relationship?
No, we can not change the settings of child record in Master Detail relationship
because child record is controlled by parent record.
76. Number of accesses available in Organization Wide Defaults and what are
they?
We have 13 types of access in Organization default settings. They are
1. Private
2. Controlled by parent
3. Public Read Only.
4. Public Read/Write.
5. Public Read/Write/Transfer.
6. Public Full Access.
7. Use.
8. No Access.
9. View Only.
10. Hide Details.
11. Hide Details and Events.
12. Show Details.
13. Show Details and events.
77. In Partner Community, external user is having appropriate OWD and Profile
Settings for Opportunity or consider any other Object. However they are getting
insufficient privilege access, what might be cause of this error ?
1. First check that every field used in report has Field level security for external
users.
2. Check whether Standard Report Visibility settings are enabled, if it is enabled
user can be able to see reports which are based on standard report types.
3. Now external user can be able to access sensitive information of internal user.
Salesforce Interview Questions on Relationships
78. What are the different types of Relationships in SFDC?What are they?
They are four types of Relationships in Salesforce.com. They are
1. Master-Detail relationship.
2. Look-up Relationship.
3. May-Many Relationship.
4. Hierarchy Relationship (we can not use this relationship).
79. What is a “Look-up Relationship”?
No parent is required.
Relationship is optional.
No impact on Security.
Roll-Up summary fields cannot be available.
25 look-up relationships can be created to one Object.
80. What is “Master-Detail Relationship”?
We create Master-Detail Relationship using Junction Object in Salesforce.
Child record must have a associated parent.
Cascade record-level security.
Cascade record deletion.
Roll-up Summary fields can be established.
Standard objects can not be a detail object.
Standard Objects can be a Master object
Maximum 2 Master-Detail Relationships can be created to a Object.
Records can be re parented.
Get more details here :- Master-Detail Relationship
81. What is a “Self Relationship”?
Self Relationship is nothing but creating relationship between two same objects.
This Self Relationship is a Look-up Relationship to the same object.
82. What is Roll-up summary?
Roll-Up Summary field in salesforce calculates values from a set of related
records.
83. Define various characters of Roll-up Summary Field?
1. Roll-Up Summary field can be created only in a object which is referred as a
object with a master detailed relationship field.
2. Roll-Up Summary field can only created for Master-detail Relationship.
3. Roll-Up Summary field can not be created for Look-up Relationship.
4. It Derives the data from child Object.
5. We can’t change field type of a field that we reference in a roll-up summary
field.
6. Auto numbers are not available here.
7. Roll-Up Summary fields are not available for mapping lead fields of converted
fields.
84. List out the functions of Roll-up Summary field ?
Count : It calculates the total number of related records.
Sum : It totals the values of selected fields.
Min : Displays lowest value.
Max : Displays the highest value.
85. What is Many-Many Relationship in Salesforce ?
Many-Many Relationships between two objects can be created.
Junction Object is used to create Many-Many Relationship.
Junction object can also be called as Join Object.
Junction Object links each objects in Many-Many Relationship.
86. How to create Roll-up summary field on look-up relationship?
https://www.salesforcetutorial.com/how-to-create-roll-up-summary-fields-in-
salesforce/
87. Can we have Roll up Summary fields in case of Parent-Child Relationships?
No.
88. Is it possible to edit Roll up summary field value in a record?
No. roll up summary fields are read only fields and they can not be edited.
89. Is it possible to create Roll up summary field on parent object ?
Yes, we can create Roll up Summary field on parent object only with master
detail relation between objects.
90. How to create Many – to – Many relationship?
https://www.salesforcetutorial.com/many-to-many-relationships-in-salesforce/
91. What is Junction Object?
In salesforce, Junction Object are the part of the objects which joins one object
to another. These are specially used to join many objects in Many to Many
relationships.
92. What are the main things need to consider in the “Master-Detail
Relationship”?
Cascade deletion of the child records is done when parent record is deleted in
Master-Detail Relationship.
93. Can we convert the look up relationship to Master Detail relationship? If so
How can we convert?
Yes, we can convert Look-Up relationship to Master-Details Relationship.
Conversion can be done only if all the fields have valid look-Up fields values
only.’
94. Can we create Master Detail relationship on existing records?
Yes, It is possible to create Master-Detail Relationship on existing record. First
we have to create Look-Up relationship to a record then convert it to master-
Detail Relationship.
95. How to create many to many relationships between two objects?
Many to Many Relationship can be created using Junction object.
Learn how to create Many to Many Relationship in Salesforce.
96. In case of Master-Detail relationship, on Update of master record can we
update the field of child record using workflow rule?
No
97. In case of Master-Detail relationship, on Update of child record can we update
the field of Parent record using workflow rule?
Yes, we can updatethe field of Parent record using workflow rule.
98. What happens to detail record when master record is deleted?
When master Record is deleted, it’s detail records are also deleted.
99. What happens to child record when a master record is deleted in Look-up
Relationship?
Child records are not deleted.
100. A custom object contains some records, now my requirement is to create
field in this object with master detail relationship.
No. we can no create master detail relationship first create look up relationship
and associate look fields for every parent record and then convert this to Master
detail relationship.
101. Can we create both master detail relationship and Look-Up Relationship at a
time ?
Yes, we can create.
Salesforce Interview Questions on Reports & Dashboards.
102.What are different kinds of reports?
There are three types of reports in salesforce.com they are
1. Tabular reports.
2. Summary reports.
3. Matrix reports
103.What are Standard Reports?
Standard reports in salesforce are those provided by salesforce.com. These type
of reports can not be deleted and used primarily for creating custom reports.
104.What are custom Reports?
Custom reports in salesforce are those created by user with specific criteria.
These type of report can be deleted, edited and stores in personal folders.
105.What is a Tabular report ?
Tabular reports in salesforce are those where the data is displayed in the form of
list. In Tabular reports custom data is arranged with out subtotals.
106.What is a Summary Report?
Summary reports in salesforce are those where the data is displayed in the form
of summary format. Sorting, sum-total of data can be available in this report.
107.What is a Matrix Report?
Matrix reports is salesforce are those where the data is arranged in grid format
having rows and columns. Data is arranged vertically and horizontally in tables
like excel format.
108.What is Trend Report?
Trend reports in salesforce are those which displays historical data. Trend
reports are used to analyse which fields contains data that we want to leave out.
109.What are Custom Report Types?
Custom report types in salesforce allows us to build framework in the report
wizard when creating custom reports. This custom reports can be created
between standard and custom objects.
110.Who can run Reports?
In Salesforce.com, most reports run automatically when we click on the report
name. If we want to run a report click on “Run Report” to run automatically.
111.What is a bucket field in reports?
In salesforce reports, bucket fields are used to categorize reports records . When
we use bucket field in reports there is no need of creating formula or a custom
field.
112.Is it possible to delete reports using Data loader?
No, it is not possible to delete reports using data loaders.
113.What are Dashboards?
Salesforce Dashboards are the graphical representation and visual presentation
of reports data in salesforce.
114.What are the different Dashboard Components?
Salesforce dashboard components are used to represent data. Salesforce
dashboards have some visual representation components like graphs, charts,
gauges, tables, metrics and visualforce pages. We can use up to 20 components
in single dashboard.
115.What are dynamic Dashboards?
Dynamic dashboards in Salesforce displays set of metrics that we want across all
levels of your organization. Enterprise Editions can use five dynamic dashboards
and Unlimited edition can use ten dashboards.
Read more on Dynamics
dashboards : https://www.salesforcetutorial.com/creating-dynamic-
dashboards-salesforce/
116.Can we schedule dynamic dashboards?
No, we can not schedule dynamic dashboards for refresh. It must be done
manually.
117.Explain dynamic Dashboard.
Dynamic dashboards in Salesforce displays set of metrics that we want across all
levels of your organization.
Dynamic Dashboards in salesforce are Created to provide security settings for
the dashboards in salesforce.com. We may have a requirement in an
organization to “view all data” by every user in an organization according to
their access we have to select Run as Logged-in User. There are two setting
option in Dashboards. They are
1. Run as specified User.
2. Run as Logged-in User.
118.Who can access “drag and drop dashboard”?
User who have permissions in managed dashboard can access drag and drop
dashboard.
119.Which type of report can be used for dashboard components?
Summary reports and Matrix reports are used for dashboard components.
120.Which permission is required to set the running user other than you in
dashboard?
The user must have “View All Data” permission is required to set the running
users.
121.What is the use of “floating report header”?
Floating report headers enables us to display the column header visible on each
page when we scroll the report page.
122.How to enable “floating report header”?
To enable floating report header in salesforce go to
Setup=>Customize=>Reports and Dashboards=>User Interface settings=>Click
on enable floating report header.
123.What is Analytical Snapshot in Salesforce.com ?
Analytical Snapshot in Salesforce are used to create reports on historical data.
124.What is Workflow?
Salesforce Workflow is a business logic that evaluates the records as they are
created, updated in an object to apply automated process like Assigning Tasks,
Emails, Field Update and outbound message sending.
125.Different Workflow Components available in salesforce?
In salesforce.com. workflows consists of 5 components they are.
1. Workflow rules.
2. Workflow tasks.
3. Workflow Email alerts.
4. Workflow field updates.
5. Workflow Outbound messages
126.What are the different workflow actions available in Salesforce?
1. Tasks.
2. Email alerts.
3. field updates.
4. Outbound messages
127.What is a Workflow Task?
Workflow tasks in salesforce are used to assigns a task to users. Using tasks we
can specify the Subject, Status, Priority, and Due Date of the task. Tasks are
workflow & approval actions that are triggered by workflow rules or approval
processes.
128.What is a Workflow Alert?
Email alert is one of the action used in workflow and approval. They are used to
generate email template by a workflow rule or approval process and sent to
destination recipients. We can send workflow email alerts to users, contacts
having an valid email address.
129.What is a Workflow Field Update?
Field updates in workflow and approval processes specifies the field that we want
updated and inserting the new value for it. Depending on the field type, we can
choose the following options. They are apply a specific value, make the value
blank, or calculate a value based on a formula you create.
130.What is Time-Dependent Workflow?
Time dependent workflows are not executed independently. Time dependent
workflows remain constant in the workflow queue as long as the workflow rule
criteria is valid.
131.Time-Dependent Workflow – Considerations?
When defining time dependent workflows in salesforce we have to use standard
and custom date and date/time fields defined for the object.
We have to specify time using days and hours.
Also add actions to existing time triggers.
132.Limitations of Time-dependent workflow?
When defining time dependent workflows in salesforce we have to use standard
and custom date and date/time fields defined for the object.
We have to specify time using days and hours.
Also add actions to existing time triggers.
133.In which criteria of a workflow – “time dependent workflow action”
cannot be created ?
Created, and every time it’s edited.
134.When you can’t add Time dependent action in Workflow rule?
Time dependent actions in workflow rules can not be added when the following
actions takes place.
When workflow rule is active.
When workflow rule is deactivated and has pending actions in the queue.
When the workflow rule criteria of a record is set to: created, and every time it’s
edited.
When the workflow rule is included in a package.
135.We have a “Time Based Workflow” and there is Action scheduled to be
executed. If we Deactivate the workflow, Scheduled actions will be removed
from queue or not?
Even after deactivating the the workflow, its action will not be removed. It’s still
active in queue.
136.We have “Time Based Workflow” and there is action scheduled to be
executed. Can we delete that workflow?
It is not possible to delete the workflow when the workflow is having any pending
time dependent actions.
137.How to clear the Time based workflow action queue?
We can clear time based workflow action queue in two ways they are
1. Make the criteria false.
2. Removing scheduled actions from the queue.
138.While creating workflow on Task, what difference observed on
available actions?
While creating workflow on task we can not find “Send Email”action.
139.Suppose if a record meets workflow criteria for time based workflow
action, the action goes in queue. Later, before the time based action is
triggered, the same record gets modified and the criteria previously met is
changed and now it does not meet the workflow criteria. What happens to
the time based action placed in Queue?
Simply the time based workflow action is removed from workflow queue and will
not get fired.
140.Difference between Trigger and Workflow?
1. What is Salesforce?
2. What is CRM?
Perform routine internal system audits and prepare the system for possible
upgrades
Help train new Salesforce users and help the staff increase their Salesforce
skills.
NetSuite CRM
Nimble
Oracle CRM
Sage CRM
Salesforce CRM
SAP CRM
SugarCRM
6. How many different editions does Salesforce have, and how often do they
release updates annually?
Customer portal
Partner portal
Self-service portal
8. What is Database.com?
Now that we have gone through the basic level of salesforce admin interview questions,
let us level up and look at the intermediate level questions.
Want to master master the core administration features of Salesforce? Check out
the Salesforce Administrator Certification Training Course.
Now, let’s ramp up the difficulty somewhat with eight tougher salesforce admin interview
questions.
A: An object is a database table that lets users store data relevant to the organization in
Salesforce. There are two types of objects: Standard and Custom. Salesforce.com
provides standard objects, while users create custom objects.
A: Profiles control and restrict access to a record according to settings and permissions
in Salesforce. There are six types:
Standard user
Solution manager
Marketing user
Read-only
System administrator
11. Can you freeze a user on Salesforce? How can you delete them?
13. Which of these is true? Users can have multiple profiles; profiles can have
multiple users.
A: The latter is true. Admins can assign a profile to any number of users, so for
instance, all the members of a team can have access to a specific profile. However,
users can only have one profile assigned.
14. Name the different data access levels in Salesforce and what they cover.
A: There are four data access levels available for Administrators to work with:
Object-level security. This access level is the simplest to control. Admins can set
permissions on any object, controlling which users can create, delete, edit, or even
view the records of any given object
Field-level security. Although you can grant any user the access to a specific
object, you can restrict which fields they can access
Record-level security. Admins can let users view a particular object, but restrict
the object records they can see.
15. List the methods of data storage (documents, images, files) available in
Salesforce.
Attachments
Chatter Files
Documents
Google Drive
Libraries
16. What is Salesforce Lightning?
After having completed the intermediate level questions, let us next increase our
difficulty level and learn these advanced salesforce interview questions.
Finally, here are eight tough salesforce admin interview questions for the people who
know Salesforce well.
Manual sharing
Organization-wide defaults
Role hierarchies
Sharing rules
A: These are the different relationships that Salesforce users can establish for objects.
External lookup
Hierarchical
Indirect lookup
Lookup
Many-to-many (junction object)
Master-detail relationship
Self-relationship
A: It is the business logic that evaluates records while creating and updating processes,
determining any need for automated action. Workflow lets records perform an action,
such as updating data or notifying people or external systems.
A: The action remains active in the queue, even if the workflow is deactivated.
A: WhoID is used for people, such as leads or contacts. WhatID refers to objects such
as campaigns, accounts, custom objects, or cases.
A: The Rollup summary field calculates the values from a group of related records. The
functions of the summary field include:
Q #3) Can you differentiate between Hybrid Cloud and Public Cloud?
Answer: Hybrid Cloud brings out the best of both the worlds – public and private clouds.
This way the hybrid cloud offers a range of deployment options and enhances flexibility.
[image source]
Suggested Read =>> Salesforce Admin Certification – A Complete Study Guide
Cloud bursting is another option when the organization transitions from a private cloud to a
public cloud – managing an increase in demand, during seasonal activities such as online
shopping.
However, in the case of a public cloud the resources are shared with other organizations
too. Here the account is managed and services accessed – using a web browser.
Q #4) What is Page Layout in Salesforce? What are the Record Types?
Answer: Page Layout is about the control of fields, buttons, Visualforce, custom links and
s-control on the Salesforce object record pages. This enables the user to customize the
record pages.
It helps to determine the nature of fields – read-only, visible or required. Here is the look of
the page layout:
[image source]
For example: Create custom fields for an account object say last recharge amount,
membership expiry date and membership plan and then create various page layouts with
these fields. To know more please watch the video:
On the other hand, record types are most convenient to offer different subsets of picklist
values or page layouts for the users. These are based on user profiles. They determine
which page layout is visible to a user, based on the user profile. Please see the example
of a Record Type below:
[image source]
For Example, Use Picklist values for segmentation of your business needs with record
types. The segmentation is done based on region, product line or division.
Q #5) What are the types of portals in Salesforce?
Answer: There are three types of Salesforce portals and these are:
Customer
Partner
Self-service
Q #6) What is a Workflow? What all are its components? What is a Workflow Rule?
Answer: Workflow allows you to automate the standard processes and procedures for your
organization and saves a considerable amount of your time. The workflow comprises of an
if/then statement.
The two major components of the workflow are:
Criteria: This is the “if” part of the statement. You need to set a criterion for a
workflow rule. Create a workflow rule for an object and then configure the criteria.
Action: This is the “then” part of the statement. This tells you what to do once the
criteria are met and comes after the configuration of a workflow rule. It is possible to
add an immediate action or a time-dependent action for a specific workflow rule.
A workflow rule in Salesforce acts as a business logic engine or a container and take some
automated actions based on some criteria. It executes the action only when the criteria are
True, otherwise, the record is saved. Here is a figure that shows a workflow rule.
[image source]
Q #7) What is the Time-Dependent Workflow?
Answer: Time-dependent actions are performed at specific times before the record is
closed. The record is re-evaluated by the workflow rule after the time elapses. It checks as
to whether the workflow rule criteria are met and only then actions are executed by the
workflow rule.
Q #8) How to clear the Time-Based Workflow Action Queue?
Answer: There are two ways to clear the time-based workflow action queue and these are:
Remove the scheduled actions of the queue.
The criteria are turned false.
Q #9) If an Action is scheduled to be executed for a Time-Based Workflow, is it
possible to delete the Workflow?
Answer: No, it is not possible to delete the workflow in such a scenario, when there is some
existing time-based action to be completed.
Q #10) In how many ways can you call Apex Classes?
Answer: The many ways to call Apex classes are:
From Visualforce Page
Within another Class
Invoke from a Trigger
Use a Developer Button
Use JavaScript buttons and Links
From Components in a Home Page
Q #11) What are the different Workflow Actions?
Answer: The various Workflow Actions are:
Email alerts
Outbound messages
Field Update
Q #12) What is a Workflow Task? State the various Workflow Tasks in Salesforce.
Answer: When you need to assign tasks to a Salesforce user you resort to a Workflow
Task. It assigns a new task to a user, record owner or a role. It helps to specify various
parameters of the task such as subject, priority, status and due date.
For Example, Assign follow-up tasks to a support person, after some time elapses for an
updated case.
Q #13) What is a Workflow Alert?
Answer: This is an email created by a workflow rule or an approval process in Salesforce
and sent across to various recipients.
Q #14) If you want to set the Running User other than yourself in the dashboard then
what is the permission required?
Answer: Here the permission required is “View All Data” to set another running user in the
dashboard.
Q #15) How do users see Report Headers while scrolling? What to do to enable this
Floating Report Header?
Answer: The parameter “Floating Report Header” is enabled to freeze the report header, so
that it appears always on the top of a page, despite scrolling of records.
When you want to enable a floating report header, you need to follow the path as stated
below:
[image source]
Q #25) State what is Roll-up Summary Field?
Answer: Roll-up summary field is used for calculating values for related records say, a
related list. It can be used to create value for a master record – based on the value in those
of the detail records. However, the detail and the master must be connected with a master-
detail relation.
For example: If there is a custom account field called Total Invoice Amount then this can
be used to display the total of all related custom invoice records for the Invoice related list of
the account.
Q #26) Is it possible to change/modify the Child Record Settings of a Master-Detail
Relationship, for setting Owd (Organization-Wide Settings)?
Answer: No, the child record settings cannot be changed for a master-detail relationship,
applicable for an Owd.
Q #27) State the cause of error for insufficient privilege access in a Partner
Community with External Users. The User has proper Owd and Profile Settings for
any object.
Answer: We need to check the following to determine this error so that the external user
must have access to all the data for the internal user.
Check field-level security for all fields for the external users – used in the reports.
Check as to whether the Standard Visibility Record Settings are enabled. If enabled
then only the user can view all the standard report types.
Q #28) What are Sharing Rules? Name what are the types of sharing Rules?
Answer: The sharing rule provides sharing access to users belonging to roles, public
groups or territories. It provides a greater level of access with automatic exceptions, away
from your organization-wide settings. Here is a figure that explains:
[image source]
The two types of sharing rules are:
Owner-based sharing rules
Criteria-based sharing rules
Owner-based Sharing Rules: Access is given for records owned by other users.
For Example, The Sales Head of a US company giving access to the Sales Manager in the
European region to opportunities owned by the US team.
Criteria-based Sharing Rules: Access is given based on record values and not based on
record owners. It states who do you share records based on the field value.
For Example,There is a custom picklist value called the department for a custom object in
your organization named job application. A criteria-based sharing rule allows the IT
manager to see all job applications for the department field set as “IT”.
Q #29) What do you think are the best practices of creating Contact Sharing Rules?
Answer: The permissions for the read, read/write, write are used by using the default
settings across the entire organization.
Q #30) What do you mean by Login Hours and Login IP Ranges?
Answer: The first parameter sets the hours when the user of a specific profile can use the
system. This can be set by the following path:
The second parameter sets the IP addresses for the users of a particular profile login into
Salesforce otherwise they are denied access. This is set by the following path:
Q #31) What is Field-Level Security? How do you set Field-Level Security on a single
field for all profiles?
Answer: This is a setting that comes in handy for restricting the view and edit of certain
fields by the Salesforce users. For setting field-level security for a specific field but all
profiles, navigate to the following path:
Management Settings of a field object> Select the field in the field area-> View Field
Accessibility->Specify the access level of the field.
For details please visit- Salesforce
Q #32) What is a Standard Profile?
Answer: Standard profiles are used in every Salesforce org and enable editing of settings.
However, in some organizations where it is not possible to create a custom profile, as in
Contact Manager and Groups Editions, the users can be assigned with standard profiles but
unable to view or edit them.
Q #33) State what are User Permissions in Salesforce?
Answer: The tasks performed by the Salesforce users as well as the accessible features
are the functions of the user permissions. These user permissions are enabled by custom
profiles and permission sets.
For Example, There is user permission “View Setup and Configuration” and the user can
access the Setup pages in Salesforce with this.
Q #34) What are the Permission Sets in Salesforce?
Answer: The Salesforce users can access various functions and tools with a collection of
settings as well as permissions. Although the permission sets are also available in the user
profiles when there is a need to access functional aspects then the permission sets are
used, with no need to change the profile, whatsoever.
Here is a figure that explains Permission Sets:
Q #35) Which fields are indexed by default in Salesforce?
Answer: The default indexed fields in Salesforce are:
Primary Keys (ID, owner and name fields)
Foreign Keys (lookup and master-detail relationship)
Audit Dates
Custom Fields (only marked as External ID or unique)
Q #36) When to use indexed fields in Salesforce?
Answer: Indexed fields can be used in query filters and this serves the purpose of
optimization of query retrieval time and thus quickly fetches the records.
Q #37) What is “transfer record” in Profile?
Answer: Transfer record permission when given to a user allows the user to transfer all
records with the read access.
Q #38) What is conditional highlighting in Salesforce Reports? State some
limitations.
Answer: When you need to highlight field values in matrix or summary reports with the use
of ranges or colours then conditional highlighting is used. But, one thing is important for you
to remember that the report must have at least one summary field or custom summary
formula. This is shown in the below figure:
For example:
[image source]
The limitations of conditional highlighting are:
Only applied to summary rows.
Only for summary and matrix reports.
Use a maximum of up to three conditions in a report.
Use only for summary rows.
Q #39) How to automate business processes?
Answer: Salesforce used various tools such as approvals, workflow, process builder and
flow builder to automate business processes.
Q #40) What is Approval Process? Are automated actions supported by Approval
Processes? How many?
Answer: Approvals comprise of a sequence of steps for approval of records in Salesforce.
The approval process specifies how records are approved in Salesforce. It elaborates on
details such as the person from whom the approval request arises and what all is done at
every step.
Yes, four types of automated actions are supported by the approval process.
For example: Create a queue on a case for support agents assigned to various service
levels.
Q #42) Can you throw some light on Assignment Rules? How do you Set up an
Assignment rule?
Answer: Assignment rules impose conditions on the processing of cases or leads. You can
set up and assignment rule by following the path:
Go to Setup->Search for Assignment Rules in Quick Find Box-> Choose Lead/Case
Assignment Rule->Click New-> Save after a name->Create Rule entries.
For details please visit- Salesforce
Q #43) What are Custom Labels in Salesforce? How to access custom labels? What
is the character limit for Custom Labels?
Answer: Custom Labels help to create a multilingual application in Salesforce. They
provide information automatically to the users in the form of error messages and help texts
– by using their native language.
Custom Labels are defined as custom text values to be accessed from a Visualforce page
or an Apex class or even Lightning components. These values then are translated into any
language that is supported by Salesforce. You can access the custom labels with the below
path:
On the other hand, the basic support customer will receive a different template.
Q #45) What are Escalation Rules?
Answer: These rules apply to the escalation of cases as per the criteria defined in the
escalation rule entry. Along with the rule entries, it is possible to create escalation actions to
specify what happens when a case escalates. An escalation rule can reassign the case to
another support agent or even a support queue.
Q #46) What are the uses of Salesforce Chatter?
Answer: Chatter is the Salesforce’s enterprise social networking application that allows
users to share information, working collaboratively and conversing with each other. It helps
to build higher employee engagement by motivation.
It also provides a forum across the enterprise to share insights or novel ideas. You can use
the mobile feed to track your team for a critical project for a mobile-first experience. Here a
figure on how it looks like:
[image source]
Q #47) How to identify a class as a Test Class in Salesforce? What are the best
practices to write a Test Class?
Answer: Test classes enable efficient debugging. The Test Classes can create error-free
code in Apex. Test Classes are used in Apex for unit testing. Test Classes detect bugs in
your code and improve your code.
Moreover, it also does Code Coverage. Code Coverage is the percentage of code that
works and the minimum is 75 % as you navigate your code from Sandbox to Production
org.
However, when using the REST Apex annotations, you must bear it in mind that no
sensitive data is exposed.
CRM is an application that helps automate or digitize marketing functions. With this
software, companies can plan to increase their profits and revenues. This strategy of
incrementing revenue and profit is made by attracting customers, clients, and sales. The
important concept of CRM is customer value.
Customer acquisition
Customer retention
Customer churn
Customer win-back
3. Distinguish between Salesforce.com and Force.com.
Both are relatively the same but different in their functionality.
Customer portal: It enables us to utilize the capabilities of the web as the ideal
channel to deliver superior self-service.
Partner portal: It allows partner users to log in to Salesforce via a separate
website than that is used for our non-partner users.
Self-service portal: Customers will be able to search for details about the
organization using this portal.
Custom tab
Visualforce tab
Web tab
Intermediate Interview Questions
Standard User
Solution Manager
Marketing User
Read-only
System Administrator
Know more about Why you should go for the Salesforce Certification Training?
Attachments
Documents
Google Drive
Libraries
Chatter Files
Do you know why Salesforce is the most sought-after CRM tool? Find out in
this blog!
Now, you are aware of the benefits of Salesforce. For more, enroll in
the Salesforce Course now!
10. How to set the Login Hours and Login IP ranges for the users in
Salesforce?
Login Hours: If Login Hours is set in an organization, then it restricts the login before or
after login hours.
Setup | Administration | Manage users | Profiles
Login IP: It helps restrict the login attempt from unauthorized IP addresses.
Setup | Administration setup | Manage users | Profiles
Count
Sum
Min
Max
Tabular Report: It is similar to a spreadsheet and is the simplest and fastest way
to see data. Tabular reports are the best to create lists of records.
Summary Report: It is similar to a tabular report but allows users to group rows
of data, view subtotals, and create charts.
Matrix Report: It is similar to a summary report, but it allows users to group and
summarize data by both rows and columns.
Joined Report: Joined reports let us create multiple report blocks that provide
different views of our data and each block acts as a subreport.
Learn more about Salesforce from this Salesforce Training in New York to get
ahead in your career!
Workflow Rules
Workflow Tasks
Workflow Email Alerts
Workflow Field Updates
Workflow Outbound Messages
Visual page
Web service
Triggers
Email services
Abiquo
Accelops
Akamai
AppDynamics
Apprenda
AWS
AT&T
CA Technologies
Cloudscaling
Bluelock
Eucalyptus
Login hours : In an organization, the schedule for login and logout is set to define the
time limit and working hours. It flags the user who does not follow the schedule. To set
the login hours for an organization in a Salesforce platform, go to:
Setup > Administration > Manage Users > Profiles
Login IP ranges: If a user tries to login via an unknown IP, then the organization is
alerted, and it can restrict the user to do so. Organizations use IP ranges to maintain
secure access so that they can prevent any kind of loss. For setting up the login IP
ranges, go to:
Setup > Administration Setup > Manage Users > Profiles
Profiles
o Page layouts
o IP ranges
o Login hours
o Desktop
o Client access
Permission
o App permissions
o Record types
o Tab settings
o Assigned apps
o Object permissions
o Field-level security
o Apex classes
o Visualforce pages