Questions tagged [permissions]
Salesforce permissions are all about what a user can do in terms of Field Level Security, object level access, Apex class access, Visualforce page access, and other built in Salesforce access that are handled via a profile or permission set.
1,010
questions
0
votes
1
answer
19
views
I would like to share sharing permissions for the list view function by profile
I want to set sharing permissions for the list view function for each profile.
Is there a way to disable certain “A” profile user groups from using the “all users can see this view” feature and only ...
0
votes
1
answer
39
views
Deactivate user from the org
When I try to deactivate a user its showing like this, I already removed ownership in Lead, Opportunity , Account and Contact objects.
I need propper steps to accomplish that. Please help
-1
votes
0
answers
20
views
Restricting lead ownership change permission to API only
Is it possible to allow users to change the owner of any Lead and Contact (not just the ones owned by them) but only when their account is being used via the Salesforce REST API and not when they are ...
0
votes
0
answers
26
views
User Object - Unable to grant permissions to some fields in Profile
I have a flow in the Omnistudio stack where we extract and pre-populate the omniscript with information from the User object: name, phone, company, etc...
This is not working in one of our orgs, so I ...
0
votes
0
answers
36
views
Experience Cloud Parent-Child Permissions
I have a parent object, called Tracker. There are many child objects for this parent object, one of them is called GPA.
In our Contact object, we have a Most Recent Role field; there are two options ...
0
votes
0
answers
34
views
Permissions restriction
OWD on Contact is Internal Public Read/Write,
OWD on TEAS object is "Controlled by Parent".
I have a profile that has read access to all contacts but edit access based on ownership ...
0
votes
0
answers
19
views
How do I set <tabVisibilities> for Connections tab (SF2SF) in metadata?
We have multiple orgs and I would like to deploy the setting to Hidden for all profiles other than SysAdmin for the Connections tab (Salesforce to Salesforce). I have tried by using these options, but ...
0
votes
0
answers
31
views
OWD vs Role hierarchy on Activities
I have a problem with setting up data security as per client's needs. What I want is for any user to have access to any Task regardless they are the owner or not of the task or the account or contact (...
0
votes
0
answers
33
views
Solution for Managing Sets of Users
In an org I would like to setup 200+ sets of users which would have a user in charge to control access to his subset of users. He will need to create, edit and assign users to profiles and permission ...
0
votes
0
answers
39
views
How to Create/Insert a new record of the objects AccountAccountRelation and PartyRoleRelation?
these 2 objects AccountAccountRelation and PartyRoleRelation have been added to our project recently and I don't know why I cannot create a record of these objects.
When I want to set the value of a ...
0
votes
0
answers
21
views
Is there a way to pull a list of fields needing read-only (for lookups) and edit (for create/update) access in order to run a specific flow?
As we transition from profiles to permission sets, I'm being asked to provide a listing of all fields needed in order to run a few certain flows to ensure we have all the permissions we need, and not ...
0
votes
0
answers
23
views
SOAP API: insufficient access rights on cross-reference id
I created a VF page to call SOAP API (version 57) for decribeLayout for a custom object with defined record type. It has payload
<se:Envelope xmlns:se="http://schemas.xmlsoap.org/soap/envelope/...
0
votes
1
answer
45
views
Can we edit managed package Permission set Groups in Salesforce?
I have a permission set group and need to edit it, but there is no edit option available, Is there any workaround/idea for this?
0
votes
1
answer
51
views
Field Level Permission Leakage to a profile
I have a Recruiter profile Which has field level permission for "Assigned Owner Field" is given only Visible Persmisson.But when a user Logins who is assigned Recruiter Profile is able to ...
0
votes
0
answers
30
views
How to fetch all the profile changes by managed package
I want to track and fetch all the metadata changes that occur in a profile when an installed package is added for users who have that profile.
I tried using the SetupAuditTrail object but it does not ...
0
votes
0
answers
209
views
Can't find my Named Credential in Permission Set
I'm trying to give access of my Named Credential to a Profile, but I just can't find the Named Credential on the Available Named Credentials in the Permission Set. I already gave the Permission Set ...
0
votes
0
answers
59
views
System Administrator profile don't have the permission but they can still see LWC component
I have created a custom LWC component and custom permission. The logic is that only users with the custom permission set I created should see the component on the page.
The issue is that it works as ...
1
vote
1
answer
139
views
not enforcing "Users in this role cannot access opportunities that they do not own that are associated with accounts that they do own"
I have this setting:
Role ID Sales opportunity access: Users in this role can edit all opportunities associated with accounts that they own, regardless of who owns the opportunities
OWD: Opportunity ...
2
votes
0
answers
25
views
Integration User license: restrict access to specific fields on a standard object [duplicate]
I would like to give an API user^ the least necessary permissions to interact with (particularly edit) objects. Ideally, I would enable only the fields they need to be able to edit.
First I tried ...
1
vote
1
answer
54
views
Automatically, or at creation, assign a new class to a profile
We are testing the use of the new Integration License for API use.
.
We have been using the Admin license for our portal, which automatically gets assigned permissions to any new classes that are ...
0
votes
0
answers
43
views
Why can I create a ContentDocumentLink via Apex but not via DataLoader?
I am trying to copy data from one org to a sandbox via a backup tool and SF Data loader. Most things worked fine, but ContentDocumentLinks are missing.
I tried loading them via Salesforce Data Loader, ...
1
vote
1
answer
85
views
Minimum permissions for a Salesforce Integration license user to create Users and assign permission sets
I am setting up a new Salesforce Integration user (one of the 5 free licenses) to act as the running user for our corporate onboarding/offboarding systems
Username onboard-offboard-integration@...
2
votes
1
answer
74
views
What is the meaning of Type field on PermissionSet standard object in Salesforce?
Documentation page about permission set provides a limited information about Type field.
Type: reference
Properties: Filter, Group, Nillable, Sort
Description: Available in API version 46.0 and later....
0
votes
1
answer
33
views
Where is the official documentation for how the "$Permission" field type functions in Formula Fields?
You can create Formula Fields that reference values from "$Permission". How are those values created? What is being referenced?
Providing the official documentation and additional ...
0
votes
1
answer
79
views
Concern with "modify all data" permission to upload a new version of a file
As per the documentation regarding Upload a New Version of a File, the note section says that
Only file owners, collaborators, and users with the Modify All Data
permission can upload new versions of ...
0
votes
1
answer
56
views
sObject type 'OrderItem' is not supported in Flow Get Records on OrderItem
Whilst migrating profile-based permissions to minimum access - salesforce + permissions + permission set groups, the running user started a screen Flow and got this error:
sObject type 'OrderItem' is ...
0
votes
1
answer
2k
views
I am getting this error: You do not have the level of access necessary to perform the operation you requested. on a Experience cloud site
I have an Experience cloud site, and a 'Community Plus User' is trying to update a record, I get this error message when he clicks on the standard 'Edit' button:
Looks like there's a problem.
You do ...
-1
votes
1
answer
71
views
How to grant access to Events for Salesforce Integration User License?
I have created a profile for API user with the License Salesforce Integration. Now, this user is missing an access to the Events object. Following the documentation, I still can not find the checkbox ...
0
votes
0
answers
102
views
Best way to analyze and clean up permissions, profiles, and permission set?
I’ve recently became an accidental Salesforce admin for a very large org and I’m working on scrubbing the profiles and permission sets since there seems to be a lot of irrelevant ones with minimal ...
-1
votes
1
answer
243
views
Does 'View all data' permission in salesforce give users access to private reports of another user? [closed]
Does 'View all data' permission in salesforce give users access to private reports of another user? Couldn't find any exact theory on this.
0
votes
1
answer
255
views
Integration user can't be used for Lead conversion
I'm trying to get the Integration user to convert a Lead via REST API. But it seems Integration License cannot have App permissions like Lead conversion.
I created a Permission set with Convert Lead ...
0
votes
0
answers
23
views
Find sobjects for which you can not give object permissions [duplicate]
Does anyone know how to find objects in Salesforce for which you can not set object permission at all ?
if you look in the profile / permission set object permission list there are objects with "...
-1
votes
1
answer
40
views
How to give access to only one field by a record owned by other user
I have a field that will only be edited when the process is finished, but the record owned by a person A and will be edited by a person B. I tryed a lot of things, but not work. I can’t change de owd. ...
0
votes
0
answers
37
views
Is it possible to remove all access to converted leads while still maintaining access to non converted leads?
I'm aware of the "View and Edit Converted Leads" permission, which I've already set to false.
The issue is with an integration user and profile. The service using the integration user ...
3
votes
0
answers
280
views
Manage permissions "The list view you requested was deleted, or you don't have permission to view it."
I'm using a Scratch org and trying to assign a Permission Set to a User. I go to "Setup" > "Permission Set" > Select a permission set > "Manage Assignments" > ...
0
votes
0
answers
133
views
Salesforce standard object not showing in Einstein search layouts
I'd like to make the object "Return Order" searchable in Salesforce Einstein global search.
Currently, I have access to two other Sandboxes where this type of search is possible, but in ...
0
votes
0
answers
261
views
Use lightning-record-form with object Layout to display record
I'm currently having some issues with displaying a record of a custom object
This occurs when a user that only has read access accesses this page - I'm currently trying to use lightning-record-form to ...
0
votes
0
answers
22
views
How can I get the user-friendly label for the available permissions?
While I'm able to query the PermissionSet object and retrieve FIELDS(ALL), parsing the fields that start with Permissions to see which permissions are available, I'd like to get the user-friendly ...
1
vote
1
answer
849
views
Is it possible to view which permission set or profile grants access to an object?
For example, I would like to know which permission set grants at least read access to an object.
1
vote
1
answer
148
views
getObjectInfo/getPicklistValues permissions needed in public community
What are the permissions needed to use getObjectInfo (needed for default record type) && getPicklistValues wire adapters in public community?
I've added but I'm getting 401 when accessing ...
1
vote
1
answer
468
views
Restrict users from changing Opportunity Stage thorugh UI
I have a task to prevent users from changing the Opportunity Stage manually, except for a subset of users which do not share the same profile. I created a custom permission and a new permission set ...
0
votes
1
answer
42
views
What is the <userPermission> for RunFlows to add it to an MDAPI deploy
I've extracted the metadata for the profiles, but cannot find any setting that allows me to deploy this. I tried using this, but it tells me 'RunFlows' it not a valid option. How can I deploy this ...
-1
votes
1
answer
124
views
Salesforce REST Apex Class working in Workbench not cURL
I’ve created an apex class using the rest resource annotation. The apex class takes the json payload, parses it, looks up a lead record from info in the payload, it then updates a field on the lead ...
-1
votes
1
answer
343
views
How do I restrict users from being able to create ANY flows?
We want to restrict the ability of users to create flows in our production org - ANY flows. How can I do this with the current permissions? We have some issues with admins and other super users ...
0
votes
0
answers
42
views
Object-specific (Lead) Activity actions permissions
I am struggling to find the permission related to an issue with user-specific & object-specific activity functionality missing from the Lead record page for end-users only (not admin).
Activity ...
3
votes
3
answers
3k
views
External credentials principals set for basic auth but fields are not found
I'm trying to use Named Credentials to authenticate to an external API. I read some tutorials, found out that they where basically all indicating the same method, so here is what I did so far :
In ...
1
vote
1
answer
110
views
New feature ApexTypeImplementor, do you have to check for READ access?
This new Standard Object https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_apextypeimplementor.htm was added as part of Spring '23.
I am ...
0
votes
0
answers
175
views
Salesforce platform user must access only an experience site
I'm in this situation.
All our users with the license "Salesforce platform users" must not access the CRM.
In fact, we are developing a "self-service" community where those types ...
0
votes
0
answers
45
views
Email is not getting sent from apex Class if I am using with sharing
I am using invokable apex class for sending email to users when my batch starts and completes, but if I am using with sharing keyword the email is not getting sent although it is showing success in ...
1
vote
0
answers
129
views
Persmissions required to query Permission sets and Permission set groups via Workbench
I have applied the Minimum access profile (+ 10 permissions below) to a user who authenticates the connection SF <> EC.
List item
List item
View All Users
View Setup and Configuration
View All ...