Skip to content

User & Access Manager ​

Metaforce User & Access Manager is a comprehensive administration console for Salesforce identity, security, and record-level authorization. It unifies user lifecycle management, role hierarchies, public groups, queues, and permission assignments into a single responsive two-pane workbench.

User & Access Manager

Core Capabilities ​

  • Unified User Directory: Filter and search users by status (Active / Inactive), User License (Salesforce, Salesforce Platform, Community, etc.), and Profile.
  • Deep Record Access Analyzer: Enter any 15- or 18-character Salesforce Record ID to instantly diagnose why a user has (or lacks) Read, Edit, Delete, or Transfer permissions.
  • Role Hierarchy & Membership: Visualize where a user sits in the corporate role tree, along with subordinates and parent roles.
  • Group & Queue Assignments: Manage Public Groups and Queue memberships with point-and-click ease.
  • Permission Sets & Groups: Inspect and toggle assigned Permission Sets and Permission Set Groups directly from the user profile.

Workspace Layout & User Management ​

Left Pane: Active Users Directory ​

  • Multi-Dimension Filters: Filter active/inactive users, specific profiles, or license types.
  • Instant Search: Type to search by name, email, or username.
  • User Selection: Clicking any user immediately loads their full security context across all tabs in the right pane.

Tab 1: User Details & Lifecycle ​

  • Profile & License Inspection: View assigned Profile, Role, and User License.
  • Administrative Actions:
    • Freeze / Unfreeze: Temporarily suspend user login capability during audits or offboarding without deactivating the record.
    • Reset Password: Trigger automated password reset emails directly from Metaforce.
    • Edit User: Modify user fields, email addresses, and Federation IDs in real-time.

Record Access Analyzer ​

Diagnosing record sharing issues in Salesforce often requires navigating multiple setup menus, sharing rules, and role hierarchies. Metaforce's built-in Record Access Analyzer solves this in seconds:

  1. Select a user in the left pane.
  2. Switch to the Record Access tab.
  3. Paste any Salesforce Record ID (e.g. an Account, Lead, Case, or Custom Object ID).
  4. Metaforce interrogates Salesforce's UserRecordAccess and sharing tables to evaluate:
    • Effective Access: HasReadAccess, HasEditAccess, HasDeleteAccess, HasTransferAccess.
    • Access Source Breakdown: Pinpoints the exact sharing mechanism granting access:
      • Record Ownership
      • Organization-Wide Defaults (OWD)
      • Role Hierarchy Traversal
      • Criteria-Based or Owner-Based Sharing Rules
      • Manual Sharing & Team Sharing (Account Team, Opportunity Team, Case Team)
      • Implicit Sharing (Parent / Child relationships)

Roles, Groups & Queues Administration ​

Tab 3: Roles ​

Inspect the user's role assignment within the organizational hierarchy tree. View managers above them and subordinates below them who inherit record visibility.

Tab 4: Public Groups ​

View all Public Groups the user belongs to (both direct assignments and indirect memberships via roles). Add or remove group memberships with one click.

Tab 5: Queues ​

Inspect and administer queue memberships across Leads, Cases, Tasks, and Custom Objects. Ensure support and operations teams have access to unassigned workloads.


Permission Sets & Groups Assignment ​

Tabs 6 & 7: Perm Sets & Perm Set Groups ​

  • Browse all available Permission Sets and Permission Set Groups in the organization.
  • Active assignments for the selected user are clearly checked.
  • Toggle checkboxes to assign or unassign permissions, then click Save to commit updates via the Salesforce Tooling API.