1. From Setup, enter Profiles in the Quick Find box, then select Profiles.
2. Create a profile, or edit an existing one.
3. Edit the profile’s settings.Profile SectionEnvironment Hub SettingsCustom App SettingsEnable the Environment Hub custom app to make it available in the App Launcher inLightning Experience or App Menu in Salesforce Classic.Connected App AccessUnless advised by Salesforce, don’t adjust settings in this section of theprofile.Service Provider AccessIf you enable single sign-on (SSO) in a member org, new entries appear in this section of the profile. Entries appear in the format Service Provider [Organization ID], where Organization ID is the ID of the member org. Users who don’t have access to the service provider sometimes see this message when attempting to log in via SSO: “User ‘[UserID]’ does not have access to sp ‘[Service Provider ID]’.”When configuring the Environment Hub in a new org, this section is empty.Administrative PermissionsEnable “Manage Environment Hub” to allow users to:Create orgs for development, testing, and trials.Configure SSO for member orgs.General User PermissionsEnable “Connect Organization to Environment Hub” to allow users to connectexisting orgs to the Environment Hub.Standard Object PermissionsGrant object permissions based on the level of access required by the Environment Hub user.Hub Members object:“Read”—View existing Hub Member records.“Create”—This permission has no impact on the ability to create Hub Member records. That’s because record creation is handled either by connecting an existing org or creating an org from the Environment Hub.“Edit”—Edit fields on existing Hub Member records.“Delete”—Disconnect an org from the Environment Hub and delete its corresponding Hub Member record and Service Provider record (if SSO was enabled for the member). “View All”—Read all Hub Member records, regardless of who created them. “Modify All”—Read, edit, and delete all Hub Member records, regardless of who created them.Hub Invitations object:If you enable the “Connect Organization to Environment Hub” permission, enable “Create”, “Read”, “Update, and “Delete” for Hub Invitations.Signup Request object:If you enable the “Manage Environment Hub” permission, enable “Create” and “Read” for Signup Requests to allow users to create orgs. Optionally, enable “Delete” to allow users to remove orgs from the hub.
4. Create orgs for development, testing, and trials.
5. Configure SSO for member orgs.
6. “Read”—View existing Hub Member records.
7. “Create”—This permission has no impact on the ability to create Hub Member records. That’s because record creation is handled either by connecting an existing org or creating an org from the Environment Hub.
8. “Edit”—Edit fields on existing Hub Member records.
9. “Delete”—Disconnect an org from the Environment Hub and delete its corresponding Hub Member record and Service Provider record (if SSO was enabled for the member).
10. “View All”—Read all Hub Member records, regardless of who created them.
11. “Modify All”—Read, edit, and delete all Hub Member records, regardless of who created them.
12. If you enable the “Connect Organization to Environment Hub” permission, enable “Create”, “Read”, “Update, and “Delete” for Hub Invitations.
13. If you enable the “Manage Environment Hub” permission, enable “Create” and “Read” for Signup Requests to allow users to create orgs. Optionally, enable “Delete” to allow users to remove orgs from the hub.
14. Select Save.