User & Access Manager
Metaforce User & Access Manager is a comprehensive administration console for Salesforce identity, security, and record-level authorization. It unifies user lifecycle management, role hierarchies, public groups, queues, and permission assignments into a single responsive two-pane workbench.
Core Capabilities
- Unified User Directory: Filter and search users by status (Active / Inactive), User License (Salesforce, Salesforce Platform, Community, etc.), and Profile.
- Deep Record Access Analyzer: Enter any 15- or 18-character Salesforce Record ID to instantly diagnose why a user has (or lacks) Read, Edit, Delete, or Transfer permissions.
- Role Hierarchy & Membership: Visualize where a user sits in the corporate role tree, along with subordinates and parent roles.
- Group & Queue Assignments: Manage Public Groups and Queue memberships with point-and-click ease.
- Permission Sets & Groups: Inspect and toggle assigned Permission Sets and Permission Set Groups directly from the user profile.
Workspace Layout & User Management
Left Pane: Active Users Directory
- Multi-Dimension Filters: Filter active/inactive users, specific profiles, or license types.
- Instant Search: Type to search by name, email, or username.
- User Selection: Clicking any user immediately loads their full security context across all tabs in the right pane.
Tab 1: User Details & Lifecycle
- Profile & License Inspection: View assigned Profile, Role, and User License.
- Administrative Actions:
- Freeze / Unfreeze: Temporarily suspend user login capability during audits or offboarding without deactivating the record.
- Reset Password: Trigger automated password reset emails directly from Metaforce.
- Edit User: Modify user fields, email addresses, and Federation IDs in real-time.
Record Access Analyzer
Diagnosing record sharing issues in Salesforce often requires navigating multiple setup menus, sharing rules, and role hierarchies. Metaforce's built-in Record Access Analyzer solves this in seconds:
- Select a user in the left pane.
- Switch to the Record Access tab.
- Paste any Salesforce Record ID (e.g. an Account, Lead, Case, or Custom Object ID).
- Metaforce interrogates Salesforce's
UserRecordAccessand sharing tables to evaluate:- Effective Access:
HasReadAccess,HasEditAccess,HasDeleteAccess,HasTransferAccess. - Access Source Breakdown: Pinpoints the exact sharing mechanism granting access:
- Record Ownership
- Organization-Wide Defaults (OWD)
- Role Hierarchy Traversal
- Criteria-Based or Owner-Based Sharing Rules
- Manual Sharing & Team Sharing (Account Team, Opportunity Team, Case Team)
- Implicit Sharing (Parent / Child relationships)
- Effective Access:
Roles, Groups & Queues Administration
Tab 3: Roles
Inspect the user's role assignment within the organizational hierarchy tree. View managers above them and subordinates below them who inherit record visibility.
Tab 4: Public Groups
View all Public Groups the user belongs to (both direct assignments and indirect memberships via roles). Add or remove group memberships with one click.
Tab 5: Queues
Inspect and administer queue memberships across Leads, Cases, Tasks, and Custom Objects. Ensure support and operations teams have access to unassigned workloads.
Permission Sets & Groups Assignment
Tabs 6 & 7: Perm Sets & Perm Set Groups
- Browse all available Permission Sets and Permission Set Groups in the organization.
- Active assignments for the selected user are clearly checked.
- Toggle checkboxes to assign or unassign permissions, then click Save to commit updates via the Salesforce Tooling API.
