TECH **Salesforce Administrator: Folders, Sharing, and Report/Dashboard Subscriptions**

Salesforce Administrator: Folders, Sharing, and Report/Dashboard Subscriptions

A Hyper-Practical, Zero-Fluff Study Guide

1. What This Is & Why It Matters

You’re the Salesforce Admin for a mid-sized SaaS company. The sales team just complained that their monthly pipeline reports are missing, and the support team can’t see the customer escalation dashboards they need to prioritize cases. Meanwhile, your CFO is freaking out because confidential financial reports were accidentally emailed to the entire company.

This is what happens when Folders, Sharing, and Subscriptions are misconfigured.

• Folders = The filing cabinets where reports, dashboards, documents, and email templates live. If you don’t control access, sensitive data leaks.
• Sharing = Who can see, edit, or run what. Without it, users either see nothing or everything.
• Subscriptions = Automated report/dashboards deliveries (like a newspaper subscription). If broken, users miss critical updates.

Why this matters in production:
- Security: Prevent data leaks (e.g., sales reps seeing HR reports).
- Productivity: Ensure teams get the right data at the right time.
- Compliance: Meet audit requirements (e.g., SOX, GDPR) by tracking who accessed what.
- Cost: Avoid duplicate reports (storage + processing) by centralizing access.

Real-world scenario:
You inherit a Salesforce org where all reports are in "Unfiled Public Reports" and everyone has "View All Data" permission. Your first task? Lock it down before the next audit.

2. Core Concepts & Components

? Folders

• Definition: Containers for reports, dashboards, documents, and email templates. Think of them like Windows folders—except with granular permissions.
• Production insight: If you don’t organize folders, users waste time searching or create duplicate reports (costing storage + processing).

? Folder Access Levels

• Viewer: Can see and run reports/dashboards (but not edit).
• Editor: Can modify reports/dashboards (but not share).
• Manager: Can share, rename, or delete the folder.
• Production insight: Never give "Manager" to non-admins—users will accidentally delete folders.

? Sharing Rules (for Folders)

• Definition: Controls who can access a folder (users, roles, public groups, or territories).
• Production insight: If a folder is private, only the owner and admins can see it. If public, everyone can (dangerous for sensitive data).

? Report & Dashboard Subscriptions

• Definition: Automated email deliveries of reports/dashboards on a schedule (daily, weekly, etc.).
• Production insight: If subscriptions fail, users miss critical updates (e.g., "Weekly Pipeline Report" not sent = sales team blind).

? Subscription Types

• Report Subscription: Sends a static report (CSV, Excel, or PDF).
• Dashboard Subscription: Sends a snapshot of a dashboard (PNG or PDF).
• Production insight: Dashboards subscriptions are static—they don’t update after sending.

? Subscription Limits

• 1,000 subscriptions per org (hard limit).
• 500 subscriptions per user (soft limit).
• Production insight: If users hit limits, they’ll spam you with "Why isn’t my report sending?"

? Folder Sharing vs. Record Sharing

• Folder Sharing: Controls access to reports/dashboards (metadata).
• Record Sharing: Controls access to data (e.g., Accounts, Opportunities).
• Production insight: A user can have record access but no folder access (and vice versa).

? Public vs. Private Folders

• Public: Visible to all users (e.g., "Company-Wide Dashboards").
• Private: Only visible to owner + admins (e.g., "Executive Financial Reports").
• Production insight: Default is "Unfiled Public Reports"—this is where reports go if not assigned to a folder.

3. Step-by-Step Hands-On: Lock Down Reports & Set Up Subscriptions

Prerequisites

✅ You have System Administrator access.
✅ You know your org’s role hierarchy (if not, check Setup → Users → Roles).
✅ You have a test user (not your admin account) to verify access.

Task 1: Create a Secure Folder & Share It

Goal: Move sensitive reports out of "Unfiled Public Reports" into a private folder and share it with only the sales team.

Step 1: Create a New Folder

1. Go to Reports tab.
2. Click New Folder.
3. Name it: Sales - Pipeline Reports.
4. Set Access Type to Private (default).
5. Click Save.

Step 2: Move Reports into the Folder

1. Go to Unfiled Public Reports.
2. Select a report (e.g., "Monthly Pipeline").
3. Click Move.
4. Select Sales - Pipeline Reports.
5. Click Move.

Step 3: Share the Folder with the Sales Team

1. Open Sales - Pipeline Reports.
2. Click Share.
3. Click Add.
4. Select Public Groups → Sales Team (or create one if it doesn’t exist).
5. Set Access Level to Viewer.
6. Click Save.

✅ Verification:
- Log in as a sales user (not admin).
- Go to Reports → Check if Sales - Pipeline Reports appears.
- Try running a report—it should work.
- Try editing—it should fail (since they’re only Viewers).

Task 2: Set Up a Dashboard Subscription

Goal: Automate a weekly sales pipeline dashboard for the sales manager.

Step 1: Create a Dashboard (if it doesn’t exist)

1. Go to Dashboards tab.
2. Click New Dashboard.
3. Name it: Weekly Sales Pipeline.
4. Add components (e.g., "Opportunities by Stage").
5. Save in Sales - Pipeline Reports folder.

Step 2: Set Up the Subscription

1. Open Weekly Sales Pipeline dashboard.
2. Click Subscribe.
3. Set:
4. Frequency: Weekly (every Monday at 8 AM).
5. Recipients: Sales Manager (user or group).
6. Format: PDF.
7. Subject: Weekly Sales Pipeline - {DATE}.
8. Click Save.

✅ Verification:
- Check the Sales Manager’s email on Monday at 8 AM.
- The PDF should arrive with the dashboard snapshot.

Task 3: Troubleshoot a Broken Subscription

Scenario: The sales manager says they’re not receiving the dashboard.

Step 1: Check Subscription Status

1. Go to Setup → Email Administration → Deliverability.
2. Ensure Access Level is All Email (not "System Email Only").

Step 2: Check User Email Settings

1. Go to Setup → Users → [Sales Manager].
2. Verify Email is correct and Email Deliverability is enabled.

Step 3: Check Subscription Logs

1. Go to Setup → Monitoring → Email Logs.
2. Filter by Recipient = Sales Manager.
3. Look for failed deliveries (e.g., "Email blocked by spam filter").

Step 4: Resend the Subscription

1. Open the dashboard.
2. Click Subscribe → Send Now.

✅ Fix:
- If email was blocked, whitelist salesforce.com.
- If user email was wrong, update it.

4. ? Production-Ready Best Practices

? Security

• Least Privilege: Only give Viewer access unless users need to edit.
• Private by Default: Start with private folders, then share as needed.
• Audit Trail: Enable Setup → Security → View Setup Audit Trail to track folder changes.
• Public Groups > Roles: Use public groups for sharing (more flexible than roles).

? Cost Optimization

• Delete Unused Reports: Run Setup → Storage Usage to find large reports.
• Avoid Duplicates: Use folder sharing instead of copying reports.
• Subscription Limits: Monitor Setup → Company Settings → Subscription Limits.

? Reliability & Maintainability

• Naming Convention: [Team] - [Purpose] (e.g., Sales - Pipeline Reports).
• Folder Structure: Mirror your role hierarchy (e.g., Executive, Sales, Support).
• Documentation: Keep a shared doc listing folder owners and access rules.

? Observability

• Monitor Subscriptions: Check Setup → Monitoring → Email Logs weekly.
• Alert on Failures: Set up a Flow to notify admins if a subscription fails.
• User Feedback: Ask teams, "Are you getting the reports you need?"

5. ⚠️ Common Mistakes & Traps

6. ? Exam/Certification Focus

Typical Question Patterns

1. "Which folder access level allows a user to share a report?"
2. ❌ Viewer
3. ❌ Editor

4. ✅ Manager

5. "A sales rep can see an Opportunity but not the report about it. Why?"

6. ❌ They don’t have record access.

7. ✅ They don’t have folder access.

8. "How do you ensure a dashboard subscription sends every Monday at 8 AM?"

9. ✅ Set frequency to Weekly and time to 8 AM.

10. "What’s the default access for a new folder?"

11. ✅ Private (only owner + admins).

⚠️ Trap Distinctions

Scenario-Based Question

"You need to ensure only the finance team can see the 'Quarterly Revenue' report. What do you do?"
- ✅ Move the report to a private folder and share it with the Finance public group.
- ❌ Give the Finance team "View All Data" (too broad).
- ❌ Leave it in "Unfiled Public Reports" (visible to everyone).

7. ? Hands-On Challenge (with Solution)

Challenge:

A support manager complains that their daily case escalation dashboard isn’t sending. The subscription is set up, but they’re not receiving it.

Your task:
1. Find the subscription.
2. Identify why it’s failing.
3. Fix it.

Solution:

1. Check Subscription Status:
2. Go to Dashboards → Open the dashboard → Click Subscribe.

3. Verify the recipient email is correct.

4. Check Email Deliverability:

5. Go to Setup → Email Administration → Deliverability.

6. Ensure Access Level = All Email.

7. Check User Email:

8. Go to Setup → Users → [Support Manager].

9. Verify their email address is correct.

10. Resend the Subscription:

11. Click Send Now to test.

✅ Why it works:
- If the user’s email was wrong, updating it fixes the issue.
- If deliverability was restricted, enabling "All Email" allows sending.

8. ? Rapid-Reference Crib Sheet

9. ? Where to Go Next

1. Salesforce Help: Folders & Sharing
2. Salesforce Help: Report & Dashboard Subscriptions
3. Trailhead: Reports & Dashboards
4. Salesforce Admins Blog: Folder Best Practices

Final Pro Tip:

"If you only remember one thing, make it this: Folders are your first line of defense against data leaks. Always start private, then share intentionally." ?