RIO Education User Profile, Custom Permission, and Permission Sets
Table of Contents
When you go through our standard RIO Education setup process, the following profiles and permission sets will be created. Some are part of RIO Education's managed package, while some are created using metadata to provide users with the ultimate flexibility to modify it.
User Profiles
The following profiles are provided as part of the RIO Education setup to provide the default configuration such as object permission and page layout assignment for RIO Education.
(See also: Salesforce User License for RIO Education)
Info
- The objects which are granted permission here are:
- EDA objects, and,
- RIO Ed objects that have an EDA object as their parent.
- The minimum object permission granted in the profiles are required by Object and Field Level Security enforcement in Salesforce.
- The profiles can be edited to include any additional settings that suit your business requirement. However, it is recommended not to remove the minimum object permission granted in the profiles to avoid issues in RIO Education.
| Profile | Managed Package Component | Salesforce License | Description |
| REDU - Admin | No, can be editable. | Salesforce. | This is used to grant the minimum object permission required and configure default page layout assignment for RIO Education administrative users. |
| REDU - Platform Faculty | No, can be editable. | Salesforce Platform. | This is used to grant the minimum object permission required and configure default page layout assignment for RIO Education faculty users. |
| REDU - Student | No, can be editable. | Customer Community Login. | This is used to grant the minimum object permission required and configure default page layout assignment for RIO Education student users. |
Whenever there is a new user, the administrator will just need to assign the users to the right profiles above except for student users. If it is a self-registration module, whenever a student self-registers, the user created will be automatically assigned to the REDU - Student profile.
Custom Permission
The following custom permissions represent the user role in RIO Education. They are used in all automation (e.g., Apex Trigger) to identify the role of the current user and determine the business logic that the user can perform.
Info
It is recommended not to assign multiple custom permissions to a user to avoid any confusion in identifying the user role. You do not need to assign the custom permission manually as they are bundled in the RIO Education permission sets.
| Custom Permission | Managed Package Component | Description | Suggested User |
|---|---|---|---|
| REDU - Admin | Yes. | Represents RIO Education's Admin role. | RIO Education System Administrators and Operational Users. |
| REDU - Student | Yes. | Represents RIO Education's Student role. | RIO Education Student Users. |
| REDU - Faculty | Yes. | Represents RIO Education's Faculty role. | RIO Education Faculty Users. |
Permission Sets
The following permission sets contain all required access such as object permission, field permission, Apex class access, and custom permission for each role in RIO Education.
Info
- Permissions for RIO Ed objects whose parent are EDA objects are granted in the profile (not in the permission set).
- It is also advisable not to assign permission sets that have multiple custom permissions, in order to avoid any confusion in identifying the user role.
| Permission Sets | Managed Package Component | Description | Suggested User |
| REDU - Admin | Yes. | This permission set consists of all required object permission (with view/read all and modify all), field level permission, custom application, apex class access, and "REDU - Admin" custom permission. | RIO Education System Administrators. |
| REDU - Operation Admin | Yes. | This permission set consists of all required object permission (without read all and modify all), field level permission, custom application, apex class access, and "REDU - Admin" custom permission. It has the similar access like REDU - Admin except for the View All and Modify All permission on all objects. |
RIO Education Operational Users. |
| REDU - Admin Tabs | Yes. | This permission set consists of all required object tabs and lightning tabs access. | RIO Education System Administrators and Operational Users. |
| REDU - Faculty | Yes. | This permission set consists of basic required object permission, field level permission, custom application, apex class access, and "REDU - Faculty" custom permission. It has the minimum access to all the components required for the users to perform the supported operations in RIO Education. |
RIO Education Faculty Users. |
| REDU - Student | Yes. | This permission set consists of basic required object permission, field level permission, custom application, apex class access, and "REDU - Student" custom permission. It has the minimum access to all the components required for the users to perform the supported operations in RIO Education. |
RIO Education Student Users. |
| REDU - Guest | Yes. | This permission set consists of basic object permission, field level permission, custom application, and apex class access. | Digital Experience (community) Guest User. |
| REDU - Admin (Manual Add on) | No, can be editable. | This permission set consists of the "Manage Users" system permission. This would be required when the "Auto Student Community Registration" setting is enabled and RIO Education Operational Users are required to create digital experience (community) student users upon approving the Program Application. | RIO Education Operational Users. |
Please note that the "REDU - Operation Admin", "REDU - Faculty" and "REDU - Student" permission sets do not have View All and Modify All permission on all objects. This allows you to have better control on the data security perspective. Please refer to this article for more details.
Custom Metadata Types and Custom Settings
This table lists out which Permission Sets have the following Custom Metadata Types and Custom Settings (as of v3.14).
| Permission Sets | |||||
|
REDU - Admin |
REDU - Operation Admin |
REDU - Faculty |
REDU - Student |
||
| Custom Metadata Types |
Auto Credit Transfer Configuration |
Yes | Yes |
Yes |
Yes |
|
Course Offering Session Status |
Yes |
Yes |
Yes |
Yes |
|
|
EDA Application Status |
Yes |
Yes |
Yes |
Yes |
|
|
Funding Type Disbursement and Order |
Yes |
Yes |
Yes |
Yes |
|
|
Payment Configuration |
Yes |
Yes |
Yes |
Yes |
|
|
Program Application Status |
Yes |
Yes |
Yes |
Yes |
|
|
Program Enrollment Status |
Yes |
Yes |
Yes |
Yes |
|
|
Requirement Review Status |
Yes |
Yes |
Yes |
Yes |
|
|
Student Fee Type |
Yes |
Yes |
Yes |
Yes |
|
|
Study Registration Status |
Yes |
Yes |
Yes |
Yes |
|
| Custom Settings |
RIO Education Settings |
Yes |
Yes |
Yes |
Yes |
| RIO Education Advanced Settings |
Yes |
Yes |
No | No | |
Adding access to Permission Set
The standard RIO Education permission sets cannot be modified. It is not recommended to clone the standard RIO Education permission set and assign the customized permission set to users.
Instead, you should create a new permission set with the additional settings and assign both the RIO Education standard and customized permission sets to a user. This is important because any new access introduced in the future upgrade is granted/provisioned automatically on the RIO Education standard permission sets. This is to ensure that the users have the correct access to support the operation.
Removing access from Permission Set
It is not recommended to remove access from the standard RIO Education permission set as it might cause object and field level security issues. You could try the following options to restrict the user access:
- Use a different page layout.
- Design a different lightning record page.
- Use custom screen flow to display or capture user input.
- Add a validation rules.
However, if the above doesn't meet your requirement, you could utilize the muting permission set feature in Salesforce Permission Group to mute the access. Please bear in mind that you should test this properly in the sandbox environment to ensure that everything is working as expected before applying in the production environment.
Creating Users
For steps on setting up Student, Faculty, and Admin users for them to be able to login, see here.