Salesforce Admin Zero to Hero - Module 1: Organization Setup & Configuration | SF Interview Pro

Salesforce Admin Zero to Hero - Module 1: Organization Setup & Configuration | SF Interview Pro
⚙️ Salesforce Admin Zero to Hero — Module 1 of 25

Organization Setup & Configuration

Before users, security, or automation — the foundation of every Salesforce org is its core configuration. Get this wrong and everything built on top of it is misaligned. Get it right and the entire org runs on a solid, predictable base.

Module 1 of 25 · Phase 1: Org Setup & Security Foundations (Begins!)
🚀 Welcome to Phase 1: Org Setup & Security Foundations. Modules 1 through 6 build the absolute bedrock of every Salesforce implementation — org configuration, users, profiles, roles, sharing, and permission sets. Every other phase assumes this foundation is solid.
🎯 What You Will Master in This Module
Organization Setup is the very first thing any Admin does when taking over or setting up a Salesforce org. These settings affect every user, every automation, every report, and every integration in the entire system. Understanding WHY each setting exists, not just where to click, is what makes the difference between a competent Admin and an expert one.
Company Information — the org identity every other setting references
Business Hours — how they affect case escalation, SLAs, and entitlements
Fiscal Year — standard vs custom, and the reporting consequences of getting it wrong
Multiple Currencies — dated exchange rates, advanced currency management
Language, Locale, and Time Zone — the three distinct settings most Admins confuse
My Domain — what it is, why it is mandatory, and how it protects your org
Login Settings, Password Policies, and Session Security
Concept 1 of 7
Company Information — The Org Identity
Company Information is the foundational record for your entire Salesforce org. It stores the organization name, primary address, default currency, default time zone, default language, default locale, and critically — your organization ID, which uniquely identifies your org across the entire Salesforce platform. Every support case you raise with Salesforce, every integration you build, and every license management discussion starts with this page.
⚡ Why This Matters
The Default Currency, Default Time Zone, and Default Locale set here become the fallback for EVERY new user created in the org who does not have their own individual preferences set. Getting these wrong from the start means every user sees incorrect data formatting, wrong time zone displays, or wrong currency symbols until someone notices and corrects it — which can take weeks in a large org rollout.
FieldWhat It ControlsImpact If Wrong
Organization NameShown in email footers, reports, user-facing pagesUsers see wrong company name in system emails
Default CurrencyCurrency for all monetary fields unless overriddenAll revenue, pipeline, and deal amounts show wrong currency symbol
Default Time ZoneApplied to all users without individual time zone setTimestamps, scheduled automations fire at wrong times
Default LocaleDate/number formatting for users without individual localeDates show MM/DD/YYYY vs DD/MM/YYYY, causing data confusion
Organization IDUnique identifier for your org — referenced by integrations, supportCannot be changed — always note this when setting up integrations
Used Data Space / File SpaceShows storage consumed vs your licensed storage limitIf maxed out, users cannot create new records — critical to monitor
🛠️ Hands-On: Audit Your Company Information
1Setup → Quick Find → Company Information → click it
2Note your Organization ID — save it somewhere. You will need it when contacting Salesforce support and when setting up integrations.
3Check Default Currency — is it the correct currency for your primary business location?
4Check Default Time Zone — does it match where your HQ or primary users are located?
5Check Default Locale — for India this should be English (India), which formats dates as DD/MM/YYYY and uses Indian number formatting
6Click Edit and update the Organization Name if needed. Save.
7Scroll to the bottom — note Used Data Space and Used File Space. In a Developer Org you will see the 5MB/20MB limits clearly.
⚠️ Critical Gotcha — Currency Cannot Be Easily Changed Later
The Default Currency set in Company Information is extremely difficult to change once data exists in the org. If you set it incorrectly (say, USD instead of INR) and then thousands of Opportunity records are created with amounts in that wrong currency, changing the default later does NOT retroactively convert or correct those existing records. Always set the correct default currency before your first users log in and start creating records.
Concept 2 of 7
Business Hours & Holidays — Time-Aware Automation
Business Hours define the hours and days during which your organization is officially operational. This is not just a display setting — it directly powers Case escalation rules, Entitlement processes (SLA tracking), and the Omni-Channel routing availability window. Holidays let you define specific non-working days that pause time-based automations. Without correctly configured Business Hours, your SLA timers run 24/7 even on weekends and public holidays.
⚡ Why This Matters
If a customer raises a critical support case at 11pm on Friday and your SLA promises a response within 8 business hours, Salesforce needs to know your Business Hours to calculate the correct deadline as 11am Monday — not 7am Saturday. Without Business Hours configured correctly, your escalation rules fire at wrong times and your SLA compliance reporting is inaccurate.
Business Hours flow through the system: Business Hours Definition ↓ referenced by Escalation Rules (when to escalate a Case based on business-hours elapsed time) ↓ referenced by Entitlement Processes (SLA milestones — "First Response within 4 Business Hours") ↓ referenced by Omni-Channel (when agents are expected to be available for routing)
🛠️ Hands-On: Configure Business Hours and Add a Holiday
1Setup → Quick Find → Business Hours → click it
2Click New. Name it Standard Business Hours.
3Set the Time Zone to your org's primary location (e.g. India Standard Time for an India-based team).
4Check the Active checkbox and check the Use these Business Hours as the default checkbox.
5Set Monday–Friday hours to 9:00 AM – 6:00 PM. Leave Saturday and Sunday unchecked — these are non-working days.
6Click Save.
7Now go to Setup → Quick Find → Holidays → New. Add a holiday: Name = Republic Day, Date = 01/26/2026. Save.
8Go back to Business Hours → click your Standard Business Hours → click Add/Remove Holidays → add Republic Day → Save. This holiday now pauses all SLA timers for that day.
💡 Multiple Business Hours Sets
You can create multiple Business Hours records for different teams or regions. A global company might have "APAC Business Hours" (9am-6pm IST, Mon-Fri), "US East Business Hours" (9am-6pm EST, Mon-Fri), and "US West Business Hours" as separate records. Each Entitlement Process or Escalation Rule references whichever Business Hours record applies to that customer or case type, enabling accurate SLA tracking across multiple time zones simultaneously.
⚠️ Common Gotcha
Business Hours only affect time-based automation that is specifically configured to USE them — they do not automatically apply to every time-based flow or workflow in your org. A Record-Triggered Flow with a scheduled path that runs "3 days after record creation" does NOT respect Business Hours unless you explicitly calculate business-hours-adjusted times in your flow logic. Only Escalation Rules and Entitlement Processes natively use Business Hours out of the box.
Concept 3 of 7
Fiscal Year Configuration — The Reporting Foundation
The Fiscal Year setting tells Salesforce when your company's financial year begins and ends. This is the foundation on which every "Current Fiscal Quarter," "Previous Fiscal Year," and "This Fiscal Year to Date" filter in reports and dashboards is built. If your fiscal year is misconfigured, every time-relative report filter in your entire org produces wrong results — silently, with no error message.
⚡ Why This Matters
Most companies do not run a fiscal year from January to December. A company with a fiscal year starting April 1st needs Salesforce to know that "Q1" means April–June, not January–March. An executive looking at a "Current Quarter Pipeline" report will see fundamentally wrong data if this is not configured to match the company's actual fiscal calendar.
Fiscal Year TypeWhen to UseExample
Standard Fiscal YearYour fiscal year always starts on the 1st of a specific month and runs exactly 12 calendar monthsApril 1 – March 31 (very common in India), January 1 – December 31
Custom Fiscal YearYour fiscal year uses non-standard periods like 4-4-5 calendars, 13 four-week periods, or fiscal quarters that do not align to calendar monthsRetail companies, media companies often use custom fiscal calendars
🛠️ Hands-On: Configure Your Fiscal Year
1Setup → Quick Find → Fiscal Year → click it
2You will see the current fiscal year settings. For most companies, Standard Fiscal Year is the correct choice.
3For a company with an April–March fiscal year (common in India): set Fiscal Year Starts In to April.
4For the Fiscal Year Name Based On field: choose The ending year if your company names the year by when it ends (FY2026 = April 2025 – March 2026), or The starting year if named by when it begins.
5Click Save. Note the warning: changing fiscal year settings affects ALL existing reports using fiscal date filters immediately.
6Verify: go to any report, add a filter on Close Date and choose Current FY. Confirm the date range shown matches your actual fiscal year.
💡 Custom Fiscal Year Warning
Enabling Custom Fiscal Year is a ONE-WAY decision — once enabled, you CANNOT revert to Standard Fiscal Year. Custom Fiscal Years also disable certain standard Salesforce forecasting features, so always carefully evaluate whether your business truly needs a custom fiscal calendar before enabling it. If in doubt, use Standard Fiscal Year — it covers the vast majority of real-world fiscal year configurations.
⚠️ Critical Gotcha — Retroactive Impact on Reports
Changing the Fiscal Year start month affects every EXISTING report that uses fiscal-period relative date filters like "Current FY," "Last FQ," or "Next Fiscal Quarter" — immediately and retroactively, with no confirmation dialog. If executives have been using a "This FY Pipeline" report for months based on a wrong fiscal year setting, correcting the setting will change what that report shows the next time it is run. Always communicate this change to stakeholders before making it.
Concept 4 of 7
Multiple Currencies & Exchange Rates — Global Business Essentials
By default, Salesforce orgs are single-currency. When your business operates across multiple countries and needs to track deals, revenue, and forecasts in different currencies — all converting accurately to one corporate currency — you need to enable Multiple Currencies. Salesforce offers two tiers: basic Multiple Currencies and the more powerful Advanced Currency Management with dated exchange rates.
⚡ Why This Matters
Without dated exchange rates, an Opportunity created in January at an exchange rate of 83 INR/USD still shows the converted USD amount calculated using TODAY's exchange rate when you run a report in December — meaning your historical pipeline data is wrong. Advanced Currency Management with dated exchange rates locks the conversion rate at the point in time when the record was created or last modified, giving accurate historical reporting.
Single Currency Org (default): All amounts stored and displayed in one currency only Multiple Currencies (basic — enabled in Setup): Amounts stored in original entered currency Converted to corporate currency using CURRENT exchange rate ⚠ Historical data shows wrong conversions when rates change Advanced Currency Management (ACM): Amounts stored in original entered currency Converted using the exchange rate DATED to when the record was modified ✓ Historical data stays accurate even as rates change over time
🛠️ Hands-On: Enable Multiple Currencies and Add Exchange Rates
1Setup → Quick Find → Company Information → click Edit
2Check the Activate Multiple Currencies checkbox → Save. Warning: this cannot be disabled once enabled.
3Setup → Quick Find → Manage Currencies → click it
4Your corporate/default currency is shown. Click New to add a second currency — e.g. add INR (Indian Rupee).
5Set the Conversion Rate (e.g. 1 USD = 83.50 INR if USD is your corporate currency). Set decimal places. Save.
6To enable Advanced Currency Management: on the Manage Currencies page, click Enable next to Advanced Currency Management.
7Once ACM is enabled, click Manage Dated Exchange RatesNew Exchange Rates → add the rate for a specific date range. This locks in that rate for records created/modified during that period.
💡 ACM and Roll-Up Summary Fields
Advanced Currency Management has one important limitation: currency fields on custom objects that are used in Roll-Up Summary fields on parent objects may not reflect dated exchange rates in the roll-up calculation. Standard Salesforce objects handle this correctly, but custom object implementations should be tested carefully. This is a known ACM limitation that comes up in Salesforce architect discussions and senior Admin interviews.
⚠️ Critical Gotcha — Both Decisions Are Permanent
Enabling Multiple Currencies and enabling Advanced Currency Management are BOTH one-way decisions — neither can be disabled once activated. Before enabling in a production org, test the complete impact in a full sandbox first. Also: when you update an exchange rate in basic multiple currencies, EVERY existing record using that currency immediately shows a different converted value in reports. This can cause significant confusion for management if not communicated in advance.
Concept 5 of 7
Language, Locale & Time Zone — Three Settings Most Admins Confuse
Language, Locale, and Time Zone are three completely separate settings that beginners frequently treat as one. They control entirely different things, and getting them wrong in different combinations produces completely different (and confusing) symptoms. Understanding each one precisely is essential for any Admin supporting a global or multi-regional org.
⚡ Why This Matters
A user complaining that "the date looks wrong" could be a Locale problem (DD/MM/YYYY vs MM/DD/YYYY). A user saying "meeting reminders fire at the wrong time" is a Time Zone problem. A user saying "I see some labels in English and some in French" is a Language problem. Without understanding which setting controls which behavior, you cannot efficiently diagnose or fix these issues.
SettingWhat It ControlsExampleSet At
LanguageThe language of Salesforce's own UI labels, buttons, menu items, and system-generated textEnglish, Hindi, French, JapaneseOrg default + per user
LocaleHow dates, times, numbers, and currency amounts are FORMATTED on screenEnglish (India): 26/01/2026, 1,00,000.00 vs English (US): 01/26/2026, 100,000.00Org default + per user
Time ZoneWhich time zone timestamps, date/time fields, and scheduled automations use when displaying and calculating timesIST (UTC+5:30), EST (UTC-5), PST (UTC-8)Org default + per user
🛠️ Hands-On: Set Org Defaults and Verify Per-User Settings
1Setup → Company Information → Edit → Confirm Default Language, Default Locale, and Default Time Zone are set correctly for your org. Save.
2Setup → Quick Find → Users → click on your own user record → click Edit
3Find the Locale, Time Zone, and Language fields on the user record. These per-user settings OVERRIDE the org default for this specific user.
4Change your Time Zone to something different (e.g. Pacific Time) → Save → go to any record with a DateTime field. Notice timestamps now display in Pacific Time, not your local time. Change it back.
5Change your Locale to English (United States) → Save → look at any date field. Notice dates now show as MM/DD/YYYY. Change back to your preferred locale.
6This exercise demonstrates how each setting independently controls a different aspect of the user experience — completely separate from each other.
💡 Translation Workbench
The built-in Language setting translates Salesforce's OWN UI labels into the selected language. But it does NOT translate YOUR custom field labels, picklist values, or custom object names — you created those yourself, so Salesforce cannot auto-translate them. For multi-language orgs where custom labels also need translation, use Setup → Quick Find → Translation Workbench to provide translated versions of your custom metadata for each language your org supports.
⚠️ Common Gotcha — Time Zone and Stored DateTime Values
Salesforce always stores DateTime field values in UTC internally, regardless of any time zone settings. When displaying them to a user, Salesforce converts from UTC to the user's configured Time Zone. This means the exact same record can show different datetime values to two different users in different time zones — which is CORRECT behavior, not a bug. However, if a user reports that a scheduled automation fired "at the wrong time," always check whether the scheduled time was entered in the user's time zone or the org default time zone, since this is a very common source of confusion.
Concept 6 of 7
My Domain — Your Org's Identity and Security Anchor
My Domain gives your Salesforce org its own unique branded subdomain, changing your login URL from the generic login.salesforce.com to something like yourcompany.my.salesforce.com. Since Spring 2021, My Domain is MANDATORY for all Salesforce orgs — it is not optional. Beyond branding, My Domain is the technical prerequisite for Single Sign-On (SSO), Lightning components, and advanced login policies.
⚡ Why This Matters
My Domain is not just cosmetic. Without it, you cannot implement SSO with identity providers like Okta, Azure AD, or Google. Lightning Web Components, Aura components, and many AppExchange packages require My Domain to be configured and deployed. It is also a security feature — by enabling My Domain, you can restrict logins so that users ONLY log in through your custom domain, preventing access via generic Salesforce login pages.
Without My Domain: Login URL: login.salesforce.com (shared with all Salesforce orgs globally) SSO: Not possible Custom components: Limited Login restriction: Cannot lock to org-specific URL With My Domain: Login URL: yourcompany.my.salesforce.com (unique to your org) SSO: Fully supported with any SAML 2.0 or OAuth identity provider Custom components: All Lightning components work Login restriction: Can prevent login from login.salesforce.com entirely
🛠️ Hands-On: Check and Configure My Domain
1Setup → Quick Find → My Domain → click it
2Your Developer Org likely already has a My Domain configured. Note your current domain name — it shows as [yourname].develop.my.salesforce.com for Developer Editions.
3Scroll to Authentication Configuration → click Edit. This section controls what login methods are shown on your org's login page (e.g. username/password, SSO buttons).
4Scroll to My Domain SettingsPrevent login from login.salesforce.com — note this option. In a production org with SSO configured, enabling this forces ALL users through SSO and prevents standard login bypasses.
5Check the Login Policy section — note "Redirect to the same page within the domain" setting. This determines what happens if a user navigates to login.salesforce.com rather than your domain URL.
6For a production org (not Dev): if My Domain was not previously deployed, click Register My Domain, enter your desired subdomain name, and register. After Salesforce provisions it (takes a few minutes), click Deploy to Users to make it live.
⚠️ Common Gotcha — Deploy to Users Step
Registering a My Domain is NOT the same as activating it. After registration, you must also click Deploy to Users. Until deployment, only you (the Admin who registered it) can use the new domain URL — all other users still go through login.salesforce.com. A very common mistake is registering a domain, thinking it is done, and then being confused why SSO still does not work for other users.
Concept 7 of 7
Login Settings, Password Policies & Session Security
Password Policies and Session Settings are your org's security baseline — the rules that govern how users authenticate, how long they stay logged in, what happens after failed login attempts, and where logins are permitted from. These settings apply org-wide unless overridden at the Profile level. A Salesforce org with weak password policies or overly permissive session settings is a security liability regardless of how well everything else is configured.
⚡ Why This Matters
Salesforce stores customer data, deal information, and sensitive business records. A compromised admin account from a brute-force attack on a weak password policy, or a session token stolen because it never expires, can be catastrophic. Salesforce Security Health Check (covered in Module 24) scores your org's security posture — and Password Policies and Session Settings are two of its highest-weighted categories.
SettingRecommended ValueRisk If Too Permissive
Minimum Password Length12+ charactersWeak passwords easily guessed or brute-forced
Password ComplexityMust mix uppercase, lowercase, numbers, symbolsSimple dictionary-attack vulnerable passwords
Maximum Password Age90 days (balance between security and user friction)Compromised passwords stay valid indefinitely
Max Login Failures Before Lockout3–5 attemptsUnlimited brute force attempts possible
Session Timeout2–4 hours for standard users, 30–60 min for AdminsUnattended sessions remain active and exploitable
Require MFAYes — mandatory for Admins, recommended for allSingle factor authentication vulnerable to credential theft
🛠️ Hands-On: Configure Password Policies and Session Security
1Setup → Quick Find → Password Policies → click it
2Set Minimum Password Length to 10 (or higher). Set Password Complexity to Must mix alpha, numeric, and special characters.
3Set Maximum Password Age to 90 days. Set Number of Invalid Login Attempts Allowed to 5. Set Lockout Effective Period to 30 minutes.
4Click Save. These changes apply to ALL users immediately on their next password-related event.
5Setup → Quick Find → Session Settings → click it
6Set Timeout Value to 2 hours. Enable Lock sessions to the IP address from which they originated — this prevents session token theft from a different IP address.
7Scroll to Login IP Ranges awareness — note that IP Range restrictions can be set at the Profile level (Module 3) to only allow logins from specific office IP addresses.
8Setup → Quick Find → Identity Verification — this is where you enforce Multi-Factor Authentication (MFA) org-wide. Enable it. MFA has been Salesforce-mandated since 2022.
💡 Profile-Level Password Policy Overrides
The Password Policy set at the org level is the DEFAULT for all profiles. However, individual Profiles can have their own Password Policy that overrides the org default. This lets you enforce stricter rules for Admin profiles (shorter session timeout, stricter password requirements) while maintaining standard rules for regular users. To set a profile-level policy: Setup → Profiles → click a Profile → Password Policies section → Edit.
⚠️ Module Wrap-Up
Every setting in this module is a FOUNDATION setting — changes to Currency, Fiscal Year, Business Hours, My Domain, or Session Settings affect every user in the org simultaneously and some cannot be reversed. The professional Admin approach is: always document the current state before changing any of these settings, always test changes in a sandbox first when possible, and always communicate the impact to relevant stakeholders before making changes in production. Module 2 goes deep on the next foundation layer: creating and managing the users who will populate this configured org.
💬 Module 1 Interview Questions (6)
Q1A sales manager reports that the "This Fiscal Year" filter on the pipeline report is showing data from January to December, but the company's fiscal year actually runs April to March. What caused this and how do you fix it?
The Fiscal Year in Salesforce is configured to start in January, which is the default calendar year rather than the company's actual April-to-March fiscal year. The fix is to go to Setup, search for Fiscal Year, set the Fiscal Year Starts In field to April, and verify the Fiscal Year Name Based On setting is correct for how the company names its years. Before saving, it is critical to communicate to all stakeholders that this change will immediately affect every existing report using fiscal-period relative filters like This FY, Last FQ, or Current Quarter, since those filters will now reflect the corrected April-to-March range rather than the previous January-to-December range, meaning the numbers shown will change visibly the next time those reports are run.
"The Fiscal Year start month is set to January instead of April — fix it via Setup Fiscal Year settings, but warn all stakeholders first because changing this immediately affects every report using fiscal-period date filters org-wide."
Q2What is the difference between basic Multiple Currencies and Advanced Currency Management, and when would you recommend enabling ACM?
Basic Multiple Currencies allows amounts to be entered in different currencies and converts them to the corporate currency using the current exchange rate at the time the report is run. This means historical records show different converted values every time exchange rates are updated, making historical analysis inaccurate. Advanced Currency Management, or ACM, solves this by using dated exchange rates, locking the conversion rate to the rate that was active when the record was created or last modified, so historical data stays consistent regardless of future rate changes. ACM should be recommended for any organization that needs accurate historical pipeline analysis, revenue reporting by period, or forecasting that compares different time periods, which is most global businesses operating with currency-sensitive revenue reporting. The caveat is that both decisions are irreversible once enabled, and ACM has a known limitation with roll-up summary fields on custom objects that should be tested before production enablement.
"Basic currencies convert at today's rate, making historical data inaccurate when rates change. ACM uses dated exchange rates to lock conversions at the rate active when the record was modified, giving accurate historical analysis — recommend ACM for any org doing period-over-period currency-sensitive reporting."
Q3A user complains that meeting reminders are firing at the wrong time, and another user says the date format looks wrong. Are these the same problem? How do you diagnose each?
These are two completely different problems caused by two completely different settings. The meeting reminders firing at wrong times is a Time Zone problem — the user's Time Zone setting on their user record does not match their actual location, causing Salesforce to display and calculate datetime values in the wrong offset from UTC. To diagnose, go to Setup, Users, open that user's record, and check the Time Zone field. The date format appearing wrong, for example showing MM/DD/YYYY when the user expects DD/MM/YYYY, is a Locale problem — the Locale on the user's record is set to English (United States) rather than English (India) or whichever locale uses the user's expected date format. To diagnose, check the Locale field on the same user record. Both settings are on the user record but control completely independent aspects of the user experience and are fixed separately.
"No — meeting reminders at the wrong time is a Time Zone issue on the user record controlling datetime display and scheduling. Wrong date format is a Locale issue controlling how dates and numbers are formatted. Both are on the user record but are completely independent settings fixed separately."
Q4Why is My Domain considered a security feature, not just a branding feature? What security capabilities does it enable?
My Domain is a security feature for three specific reasons beyond branding. First, it enables the option to prevent login from the generic login.salesforce.com URL, meaning all authentication must go through the organization's specific domain, which prevents attackers from attempting to bypass SSO or MFA requirements by using generic Salesforce login pages. Second, it is the technical prerequisite for SAML-based Single Sign-On with identity providers like Okta or Azure AD, which is itself a major security improvement over username and password authentication alone. Third, it is required for enforcing organization-specific login policies and authentication flows via Login Flows, which can add additional verification steps before granting access. Without My Domain, none of these capabilities are possible, which is why Salesforce made it mandatory for all orgs starting in Spring 2021.
"My Domain is a security feature because it enables restricting logins to your org's specific URL preventing generic login bypasses, is the prerequisite for SSO with identity providers like Okta or Azure AD, and enables org-specific Login Flows with additional verification steps — none of which are possible without it."
Q5An SLA requires responding to critical cases within 4 business hours. A critical case is created at 4:30 PM on a Friday when your business hours end at 5 PM. When should the escalation actually fire?
With Business Hours correctly configured and referenced by the Escalation Rule, Salesforce will calculate 4 business hours starting from when the case was created. The business day ends at 5 PM Friday, meaning only 30 minutes of the 4-hour SLA window elapses on Friday. The remaining 3.5 business hours carry over to the next business day, which is 9 AM Monday assuming Saturday and Sunday are non-working days. 3.5 hours after 9 AM Monday is 12:30 PM Monday, so the escalation should fire at 12:30 PM Monday. This is only possible if the Escalation Rule is configured to use the Business Hours record, and the Business Hours record correctly excludes Saturday and Sunday. If Business Hours are not configured or not referenced by the Escalation Rule, the system would calculate 4 hours from 4:30 PM Friday and fire the escalation at 8:30 PM Friday, completely ignoring non-working hours.
"30 minutes of the SLA elapses Friday before business hours end at 5 PM, then 3.5 hours carry over to Monday morning at 9 AM, making the escalation fire at 12:30 PM Monday — but only if the Escalation Rule is specifically configured to use Business Hours; without that configuration, it incorrectly fires at 8:30 PM Friday."
Q6What is the difference between setting Password Policies at the org level versus the Profile level, and when would you use Profile-level policies?
Org-level Password Policies apply as the default to all users across the entire organization who do not have a more specific Profile-level policy overriding them. Profile-level Password Policies are set within individual Profiles and override the org default for all users assigned to that Profile. Profile-level policies are appropriate in several scenarios: first, when System Administrator profiles should have stricter requirements than regular users, such as shorter session timeouts, more complex passwords, or more frequent password changes, reflecting the higher risk of an admin account being compromised; second, when certain user groups like API-only integration users have no need for password expiration since they use token-based authentication and frequent password changes would break integrations; and third, when specific external or customer community users need different policies than internal employees. The general principle is that the org default handles the common case, and Profile-level overrides handle exceptions in either the stricter or more permissive direction.
"Org-level policy is the default for all users; Profile-level policy overrides it for users on that specific profile — use Profile-level when Admins need stricter rules than regular users, API-only integration users need no password expiration to prevent breaking integrations, or specific user groups need genuinely different security requirements."
📝 Module 1 Recap — Organization Setup & Configuration Mastered
✅ Company Information: set Default Currency, Locale, and Time Zone correctly before any users are created — changes later cause data display issues retroactively
✅ Business Hours: not just display — they power Case escalation SLA timers and must be assigned to Escalation Rules to actually work
✅ Fiscal Year: misconfiguration silently corrupts every fiscal-period report filter in the org — check this before the first users start entering data
✅ Multiple Currencies: basic uses current rates (inaccurate historically), ACM uses dated rates (accurate) — both enablements are irreversible
✅ Language (UI labels) vs Locale (date/number format) vs Time Zone (timestamps) — three completely independent settings with different symptoms when wrong
✅ My Domain: mandatory since Spring 2021, prerequisite for SSO, enables restricting logins to your specific org URL — Register then Deploy to Users (both steps required)
✅ Password Policies and Session Settings: org-wide defaults that Profile-level policies can override — MFA is mandatory, session timeout and lockout thresholds are security-critical
🎯 Module 1 Practical Checklist — Complete These in Your Org
1. Set your org Default Locale to English (India) and Default Time Zone to India Standard Time.
2. Create Business Hours named "Standard Business Hours" with Mon–Fri 9am–6pm IST and add at least two Indian public holidays to it.
3. Set your Fiscal Year to start in April (matching the Indian financial year).
4. Enable Multiple Currencies, add INR and optionally EUR, and set an exchange rate for each.
5. Verify your My Domain is registered and deployed. Check that Authentication Configuration shows your preferred login methods.
6. Set Password Policy: minimum 10 characters, mixed complexity, 90-day expiry, lock after 5 failures.
7. Set Session Timeout to 2 hours. Enable MFA if not already enabled.

This is exactly the checklist a professional Admin runs through when taking over any new Salesforce org. Module 2 covers the next layer: creating and managing the users who will log into this configured environment.
Test yourself on this topic
2,244 practice MCQs across 27 quizzes — 5 quizzes free, no signup
Open Practice Zone →
RK
Written by
Rajnish Kumar
Salesforce Developer · Apex, LWC, Data Cloud & AI · Building SF Interview Pro
Connect on LinkedIn ↗
Testimonials

Real feedback from real candidates

People using SF Interview Pro to prepare for Salesforce interviews
★★★★★
"Crashed multiple interviews thanks to this. Better than the paid courses I tried."
SP
Salesforce Professional
Developer
★★★★★
"No signup, no paywall. The Apex Trigger series alone got me through two rounds."
AK
Aditya K.
Salesforce Admin
★★★★★
"LWC Zero to Hero is more practical than any paid course I found."
RM
Riya M.
LWC Developer
★★★★★
"Practice Zone MCQs matched my actual interview difficulty almost exactly."
PS
Priya S.
Business Analyst
★★★★★
"Started knowing nothing. Three weeks later I had two offers."
MK
Mohit K.
Salesforce Admin
★★★★★
"Company-wise Accenture prep was scarily accurate."
SN
Sneha N.
Consultant
★★★★★
"Explains identity resolution better than official Trailhead modules."
VR
Vikram R.
Data Cloud Consultant
★★★★★
"Free and better than the paid prep I bought earlier."
TJ
Tanvi J.
Fresher
★★★★★
"Reports and Dashboards guide made a tricky topic finally click."
KP
Karan P.
Salesforce Admin
★★★★★
"SOQL Part 2 questions came up almost word for word in my interview."
AN
Ananya N.
Developer
★★★★★
"Field Service Lightning guide is the only good free resource I found."
RD
Rohan D.
FSL Consultant