Why app-scoped workspaces matter
OL
Ola Lindqvist · Operations Lead
"Our Sales team and Support team live in the same CRM, but neither should have to wade through the other's menus every day just to find their own work."
One shared platform serving multiple teams shouldn't mean one undifferentiated, cluttered navigation bar for everyone.
Business outcome
Every team gets a focused, uncluttered workspace tailored to their job — no separate logins, no separate product, no extra license.Anatomy of an App
An App is a named container grouping Tabs. A Tab is either an object shortcut (goes to /records/{objectApiName}) or a built-in feature page (like /reports or /dashboard).
| Concept | Detail |
|---|---|
| Tab type: OBJECT | Points at a specific custom/standard object |
| Tab type: STANDARD | Points at a built-in route, e.g. Reports, Dashboard, Marketing Studio |
| App visibility | Controlled entirely by Profile → App Access — no grant means the app is invisible to that profile |
| Shared tabs | The same Tab can belong to multiple Apps at once — e.g. "Reports" showing up in both Sales and Support |
Apps organize, Profiles secure
An App is purely a navigation grouping — it does not itself restrict data access. That job still belongs to Profiles and Sharing Rules.Build a dedicated Support Console
Create the appSetup → App Manager → New App — name it "Support Console", pick an icon.
Create or reuse tabsTab Manager → add OBJECT tabs for Case and Contact (use "Quick Add Standard Tabs" for anything built-in you need).
Assign tabs to the appOpen App Detail for "Support Console" → drag the Case and Contact tabs into it, in your preferred order.
Grant accessProfiles → open the Support profile → App Access → grant "Support Console" (and consider revoking the default Sales app for that profile).
VerifyLog in as a Support user and confirm only the Support Console's tabs appear in the top navigation.
Test what you learned
1. Does deleting an App also delete the Tabs and Objects assigned to it?
Yes, everything it contains is deleted too
No — only the App container is removed; tabs and objects remain
2. What actually controls whether a user can see a given App?
Their role (ADMIN / MANAGER / SALES_USER)
Profile App Access grants