Required User Privileges for Metadata Extraction
  • 1 Minute to read
  • PDF

Required User Privileges for Metadata Extraction

  • PDF

Article summary

Sandbox Organization

Permissions required for the Sandbox Organization - 

Metadata extraction  

  1. API Enabled
  2. Author Apex
  3. Download AppExchange Packages
  4. Modify all data
  5. Manage Custom Report Types
Good to know!
ForeSight will only retrieve metadata from Salesforce to which the authentication user has access. Objects which require specific permission sets which are not included in the permissions above, will not have their metadata extracted. You can add the missing permissions to the authentication user and the missing metadata will be available after the next extraction.

Review how to verify the authentication user has the required permissions.
Note
In cases where Field Service Lightning is enabled for your Sandbox or Production Organization, the Field Service Standard permission should be added to the metadata extraction for both Organizations

For extraction of Salesforce CPQ data

The Salesforce user for authentication must have Field Level Security (FLS), including one of the following:

  1. Associated profile has read access FLS for CPQ fields
  2. User has a permission set with read access FLS for CPQ fields

Review how to verify the access of the authentication user to Salesforce CPQ objects.



Production Organization (Optional)

Permissions required for the Production Organization  - 

Metadata extraction

  1. API Enabled 
  2. Modify All Data
  3. Customize Application
  4. Manage Custom Report Types
  5. Manage Users
Note
If you are using Org Overview Dashboard and the Components maintained in Production checkbox is checked in the Production Organization configuration, two additional permissions are required for the metadata extraction:
1.  Author Apex
2. Download AppExchange Packages
Note
In cases where Field Service Lightning is enabled for your Sandbox or Production Organization, the Field Service Standard permission should be added to the metadata extraction for both Organizations



Usage with Event Log Monitor

Retrieves usage of Dashboards, Reports, Visualforce pages

Enable the following permissions in SFDC to be able to view usage statistics within Panaya

  1. API Enabled 
  2. View Event Log File
  3. Run Reports
  4. Customize Application
  5. View Dashboards in Public Folders
  6. View Reports in Public Folders

Event Log File Doc

Note
The user used for the metadata extraction should not be limited to Restricted IPs. To verify, follow these steps - 

  1. log in to the relevant Salesforce Org
  2. Click Setup
  3. Search for Users in the search box and locate the user in the table and look for the Profile column
  4. Click on the Profile and then Login IP Ranges
  5. In the System section, verify there are no specified IP ranges

Usage without Event Log Monitor

Retrieves usage of Reports, Visualforce pages, and Approval Processes

Enable the following permissions in SFDC to be able to view usage statistics within Panaya

  1. API Enabled
  2. Run Reports
  3. View Reports in Public Folders
  4. Customize Application

Good to know!
When setting up ForeSight usage statistics go 30 days back.
Once configured, the usage is constantly accumulated.