2

I have the "Profile-Based Rollout of Chatter" feature enable in my org. Per this page users with certain permissions will automatically have Chatter enabled.

Naturally, I'd like to verify that the users who I do not want to have access to Chatter don't have access. I was thinking I could do some querying of the PermissionSet and PermissionSetAssignment objects, and came up with a query like:

select Assignee.name, Id, PermissionSet.name, SystemModstamp from PermissionSetAssignment where assignee.isactive = true and (permissionset.permissionsChatterOwnGroups = true OR permissionset.permissionsChatterFileLink = true or permissionset.permissionsChatterInviteExternalUsers = true or permissionset.permissionsManageChatterMessages = true or permissionset.permissionsModerateChatter = true or permissionset.permissionsViewAllData = true or permissionset.permissionsChatterEnabledforUser = true) order by permissionset.name, Assignee.name

However, I don't know if this query is thorough enough ensure I'm seeing all of the users who can currently access Chatter. So, how can I hunt down all users who have access to Chatter and determine why?

1 Answer 1

1

From the page you cited:

When Salesforce turns on profile-based rollout of Chatter for your organization, the Enable Chatter permission is added to all of your existing user profiles and permissions sets. This permission is automatically enabled for all standard profiles. It is also automatically enabled for all custom profiles, if any of the following user-level permissions were already enabled, either manually or as part of a license:

  • “Create and Own New Chatter Groups” (ChatterOwnGroups)
  • “Create and Share Links to Chatter Files” (ChatterFileLink)
  • “Invite Customers To Chatter” (ChatterInviteExternalUsers)
  • “Manage Chatter Messages” (ManageChatterMessages)
  • “Moderate Chatter” (ModerateChatter)
  • “Moderate Chatter Feeds” (ModerateNetworkFeeds)
  • “Use Case Feed” (ViewCaseInteraction)
  • “View All Data” (ViewAllData)

ChatterEnabledforUser will be enabled by Salesforce in the Profile of ALL Users who have any of the permissions enabled on the list above for them as part of a Standard or Custom Profile. As such, the additional permissions you're querying for are not necessary if you're trying to establish a baseline of who can access Chatter. This permission is added to ALL of your Standard profiles, Custom Profiles that contained one of the above permissions, and ALL permission sets when Salesforce turns on Chatter for you.

I'd think you'd want to know whether Chatter is enabled through a Profile as opposed to sharing through a permissionset. Consequently, I would add ProfileId to your query. Since it sounds as though you're a profile based Org as opposed to using groups and permission sets, you could create another query on User to select Id, Name where ProfileId in: list of ProfileId's returned in permission query. You could also try building your query starting from User rather than from permissionsets. That might make it easier to get a single result based on profiles along with any permissionsets you may have.

2
  • We are mostly Profile based, but do have a few Permission Sets kicking around. Our long term roadmap has us making some changes to how we do security, but for now I've got to deal with a mish mash. So, there's still my question. How can I tell which users have access to Chatter and what is making that so?
    – mkdjns
    Nov 2, 2014 at 4:48
  • Get a list determined by profiles. Convert that list to a set. Get a list determined by permission sets. Convert that list to a set. You can do an add all to get all users. Use set methods to determine which members are in one set but not the other. That will tell you which ones have the Chatter via permissionsets vs profiles. Regardless will still need the base permission to access Chatter, making the other permissions irrelevant.
    – crmprogdev
    Nov 2, 2014 at 13:26

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .