Who administers your Salesforce org? If the answer is 'they left', read this.
Salesforce orgs outlive the people who set them up. The consultant who did the implementation, the ops hire who became the accidental admin, the co-founder who owned it in year one — System Administrator profiles accumulate, and one day the org that runs your entire sales motion has no working admin who still works for you.
Salesforce is worth reading about *before* that day, because its recovery path is the most formal in this series: at the end of the road, it involves a signed letter from your CEO. Here's the model, the fixes, and the escalation ladder — per Salesforce's own help docs.
Audit your administrators
In Setup → Users, filter by profile: who holds System Administrator? Salesforce's explicit recommendation is to keep more than one active system administrator at all times — the entire recovery ladder below exists for businesses that didn't.
The three recovery paths, in order
- 1Another active admin existsEasy: they open Setup → Users, deactivate or edit the departed admin's user record, and grant System Administrator to a current employee. Do the full offboarding sweep while you're there.
- 2No admin, but the departed admin's email was corporateIf your IT team controls the email domain, Salesforce Support can reset the admin password to that address — your team intercepts the reset and hands the org to a current employee. This is the strongest argument for never letting admins register personal emails.
- 3No admin, no email accessThe formal path: Salesforce Customer Support will change the previous administrator's email address — but the request must come as a signed letter from a C-level executive (CEO, CFO, CIO, or the business owner). It works; it just takes exactly as long as it sounds.
Set it up properly
- Two or more active System Administrators, on corporate email addresses, at all times — Salesforce's own best practice, and it collapses the whole recovery ladder into a non-event.
- Consultants and implementation partners get their own admin users you can deactivate — never the only ones, and never on personal addresses.
- When an admin leaves, deactivate the user and reassign their records, but don't delete-in-haste — ownership chains and automations reference them.
- Record the admin list in your asset register and re-check it on every departure — the CRM holds your revenue history; treat its keys accordingly.
The free scan maps your domain, email, cloud, social and tools from public records — and shows what you'd lose access to tomorrow. No login, nothing to install.
Check my business