Configuring profile-level permissions after self-upgrade or automatic upgrade

Before you begin

If you are not upgrading from the previous release, ensure that you apply profile-level permissions for all releases in between.

Upgrade option

If you are using BMC Helix Remedyforce profiles or custom permission sets to manage permissions for your users, you might need to manually configure the updated profile-level permissions in a release. The following table lists the conditions in which you must manually configure profile-level permissions after you have self-upgraded or BMC has automatically upgraded your organization. However, if are using BMC Helix Remedyforce permission sets instead, you only need to enable new features after your organization is upgraded.

Note

If you are using profiles instead of permission sets to manage permissions for users, BMC strongly recommends that you start using BMC Helix Remedyforce permission sets. You can assign multiple permission sets to your users to control the accessibility of BMC Helix Remedyforce.

You have to assign the permission sets to your users only once. The next time a major release is automatically pushed to your organization, these permission sets are automatically updated. Moving to permissions sets will ensure that the automatic upgrade process is simplified and requires minimal manual post-upgrade configuration.

To enable the enhanced profile user interface

The Salesforce enhanced profile user interface enables you to apply all changes to a profile from a single page. For more information about the enhanced profile user interface, see the Salesforce Help.

Navigate to the required path:
- For Salesforce Classic, go to Setup > Build > Customize > User Interface.
- For Salesforce Lightning, go to Setup > Platform Tools > User Interface > Translation Workbench > User Interface.
In the Setup section, select the Enable Enhanced Profile User Interface check box.

Click Save.

To configure profile-level permissions after upgrade

This procedure is based on the enhanced profile user interface provided by Salesforce. For more information, see To enable the enhanced profile user interface.

Navigate to the required path:
- For Salesforce Classic, go to Setup > Administer > Manage Users > Profiles.
- For Salesforce Lightning, go to Setup > Administration > Users > Profiles.
Click a profile for which you want to configure permissions, such as ServiceDesk Staff.
On the Profile Overview page, perform the following actions to configure permissions for new Visualforce pages:
1. In the Apps section, click Visualforce Page Access.
2. In the Visualforce Page Access section, click Edit.
3. From the Available Visualforce Pages list, select the Visualforce pages that are required for the selected profile.
  For the list of new Visualforce pages, see 01.
  
  Note
  If a Visualforce page is already available, proceed to the next page listed in the table.
4. To move the selected pages to the Enabled Visualforce Pages list, click the right arrow.
5. Click Save.
In the Visualforce Page Access section, click Profile Overview.
On the Profile Overview page, perform the following actions to configure permissions for new Apex classes:
1. In the Apps section, click Apex Class Access.
2. In the Apex Class Access section, click Edit.
3. From the Available Apex Classes list, select the Apex classes that are required for the selected profile.
  For the list of new Apex classes, see 01.
  Note
  If a class is already available, proceed to the next class listed in the table.
4. To move the selected classes to the Enabled Apex Classes list, click the right arrow.
5. Click Save.
In the Apex Class Access section, click Profile Overview.
On the Profile Overview page, perform the following actions to configure permissions for new objects and fields:
1. In the Apps section, click Object Settings.
2. In the All Objects Settings section, click an existing object that has new fields.
  For the list of new objects and fields and the permissions that you must configure for each profile, see 01.
3. Click Edit.
4. (Only if the selected object is new) In the Object Permissions section, enable the appropriate permissions for the selected profile.
5. In the Field Permissions section, enable the appropriate permissions for new fields in the selected object.
6. Click Save.
7. Click Object Settings.
8. Repeat step 7b to step 7g for all updated objects.
Repeat step 2 to step 7 for the following profiles:
- ServiceDesk Client
- ServiceDesk Change Manager
- System Administrator
- Profiles for which you have configured the ServiceDesk Change Manager, ServiceDesk Client, and ServiceDesk Staff levels of access when you installed the managed package