This update converts the Read Only standard profile to a custom profile, which allows you to edit permissions in this profile as your business needs require. This update was first available in Spring ’21 and is enforced in Summer ’21.
Where: This change applies to Lightning Experience and Salesforce Classic in all editions.
When: This update was first available in Spring ’21 and is enforced in Summer ’21. To get the major release upgrade date for your instance, go to Trust Status, search for your instance, and click the maintenance tab.
Why: The Read Only standard profile allowed assigned users to view setup, run and export reports, and to view, but not edit, other records. As Salesforce products and offerings expanded, permissions that grant implicit or explicit edit access were added to this profile to allow Salesforce features to function.
To let you customize the Read Only profile to fit your risk tolerance and definition of read only, this update converts the Read Only standard profile to a custom profile. After this update is enforced, you can edit the Read Only custom profile to remove or add permissions as your business needs require. You can also rename the profile, for example, to reflect what it permits or who it’s assigned to.
As part of this change, Essentials editions can create up to two custom profiles and Professional editions can create up to three custom profiles. The converted custom Read Only profile counts towards this limit.
How: Before this update is enforced, review the permissions included in the Read Only profile. Evaluate whether you want the users assigned to the Read Only profile to continue to have the included permissions. You can see a full list of included permissions in the knowledge article, Read Only Profile Conversion to Custom Profile.
After you review the permissions, decide whether to reassign your users to a new profile or to use the existing Read Only profile without reassigning your users. If you continue to use the existing Read Only profile, update your custom code to reference the correct name of the Read Only standard profile after it’s converted to make sure that your configurations and deployments remain intact.
To review this update, from Setup, in the Quick Find box, enter Release Updates, then select Release Updates. For Convert the Read Only Standard Profile to a Custom Profile, follow the testing and activation steps.
New Salesforce orgs created in Spring ’21 and later don’t have the Read Only profile. We recommend that you start with the Minimum Access standard profile as a least-privilege profile base, and assign custom permission sets to grant this user the Read access required by your business needs.