---
schema_version: "1"
id: a0330abdcf087a478ce607b9a175a57fe34d965dd740f8193cf1e699c0780525
title: Control Access to Salesforce Objects and Fields
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/analytics/264-0-0/bi_security_salesforce_object_field_levels_control_access.md
canonical_url: https://help.salesforce.com/s/articleView?id=analytics.bi_security_salesforce_object_field_levels_control_access.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: d0dddf86597926af1b3de06ee45092e80b35e6d286bc2f718b72ebef522fdf95
description: CRM Analytics requires access to Salesforce data when extracting the data and also when the data is used as part of row-level security. Configure the permissions of the Integration User on Salesforce objects and fields to control the dataflow’s access to Salesforce data. Configure the permissions of the Security User to enable row-level security based on custom fields of the User object.
products:
  - CRM Analytics
  - Cross Cloud
release: "264"
---
# Control Access to Salesforce Objects and Fields

CRM Analytics requires access to Salesforce data when extracting the data and also when the data is used as part of row-level security. Configure the permissions of the Integration User on Salesforce objects and fields to control the dataflow’s access to Salesforce data. Configure the permissions of the Security User to enable row-level security based on custom fields of the User object.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d103042e25">User Permissions
              Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d103042e25 ">
              <p style="margin-bottom:0;">To clone a user profile:</p>
            </td>
            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d103042e25 ">Manage Profiles and Permission Sets</td>
          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d103042e25 ">
              <p style="margin-bottom:0;">To edit object permissions:</p>
            </td>
            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d103042e25 ">
              <p>Manage Profiles and Permission Sets</p>
              <p dir="ltr">AND</p>
              <p style="margin-bottom:0;">Customize Application</p>
            </td>
          </tr>
        </tbody>
      </table>

When configuring permissions for the Integration User or Security User, edit a cloned version of the user profile.

1. From Setup, enter Profiles in the Quick Find box, then select **Profiles**, and then select the user profile.
    
    For the Integration User, select the Analytics Cloud Integration User profile. For the Security User, select the Analytics Cloud Security User profile.
2. Click **Clone** to clone the user profile.
3. Name and save the cloned user profile.
4. Click **Object Settings**.
5. Click the name of the Salesforce object.
6. Click **Edit**.
    1. To enable permission on the object, select **Read** in the Object Permissions section.
    2. To enable permission on a field of the object, select **Read** for the field in the Field Permissions section.
        
        ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-analytics-bi-264-0-0-production-enus/ec791473-f5b4-4f64-a656-9104f455d966/images/icon_note.png)
        
        Note You can’t change the permissions on standard fields of the User object.
7. Save the object settings.
8. Assign the cloned user profile to the Integration User or Security User.
    1. From Setup, enter Users in the Quick Find box, then select **Users**.
    2. Select the user to which you want to assign the user profile.
    3. Click **Edit**.
    4. In the Profile field, select the user profile.
    5. Click **Save**.
9. Verify that the Integration User or Security User has the right permissions on fields of the objects.