Administrators may sometime need to assist their users. It would be better if they can log into their org without asking them to grant access. Yeah! Salesforce allows administrators to login as the specific user. To do so, administrator needs to enable “Administrators Can Log in as Any User” setting from the Setup.
Steps to enable the feature
- Go to Setup.
- Enter
Login Access Policies
in the Quick find box. (Or, you can access it from Administer > Security Controls > Login Access Policies). - Enable
Administrators Can Log in as Any User
checkbox. - Click the
Save
button.
Steps to use the feature
- Go to Setup.
- Enter
Users
in the Quick find box. (Or, you can access it from Administer > Manage Users > Users). - Click the
Login
link in the Action column.
Or, you can access it from user detail page:
- You can now see that you will be logged in as the specific user:
- To logout, you can log out in the usual manner. You will be redirected automatically to the base account login.
Common Issues:
- Administrator logs out when logging out the user
When you log out, you may encounter the issue of getting logged out of your original session as well. This can be fixed by disablingForce relogin after Login-As-User
setting from Setup > Security Controls > Sessions Settings. You can find this checkbox under section Require secure connections (HTTPS). - Can’t assign user to login as any user
Check if the user hasModify All Data
permission - Can’t login as any user
Check if that user hasTwo-factor Authentication for User Interface Login
is enabled for that user. If so, coordinate with the user to verify the authentication. Also, as a security measure, you can’t authorize OAuth data access for that user, including single sign-on to third-party applications. - I want to remove such feature – Administrators Can Log in as Any User
To have this feature removed from your org, contact Salesforce. If you remove the feature, a user must grant login access before a Salesforce admin can log in to that user’s account for troubleshooting. (Reference: https://help.salesforce.com/articleView?id=controlling_login_access.htm)