Permissions Report in Backup & Recover for Salesforce FAQs

The Permissions Report lets you know when your Salesforce authenticated user is missing permissions needed to back up data. Find answers to questions about Permissions Reports.

Why did I receive a “Permission Exceptions Identified” email?

After your weekly full backup, we run a Permissions Report to review the field-level read permissions that your Salesforce authenticated user has in your Salesforce org. If any Field-Level Security (FLS) issues are found, they are summarized in this email.

What does the Permissions Report show?

This report lists the fields that the Salesforce authenticated user doesn't have read access to in their Salesforce org. If the authenticated user doesn't have the correct permissions to read a field, the backup doesn't contain that field. Even when your authenticated user has "Modify All" and "View All" permissions at the profile level, it's common to see overlooked fields in this report. This is typically due to older custom fields or fields from managed packages.

Your backup will still complete successfully, though it will be missing these fields.

You will receive an email if any items were added, removed, or changed in your Permissions Report. We recommend reviewing the changes in your Permissions Report and resolving the missing permissions.

What if I don’t need a certain field in my backups?

If there are any fields included in a backup that the authenticated user does not have permissions for, a warning message appears on the Permissions Report screen.

You can choose to exclude certain fields from future backups if you do not want the authenticated user to have permission for them, or they are not deemed critical by the business.

What if I want to see the Salesforce org’s FLS permission gaps without waiting for the next full backup?

To immediately see the changes reflected and not wait until the next full backup, click Analyze Permissions on the Permissions Report page. An Analyze Permissions job will run and a new Permissions Report will be generated.

What else can I do on the Permissions Report page?

From the Permissions Report page, you can:

  • Hide excluded items.
  • Use the search bar to find specific fields.
  • View the Permissions Report table. The permissions tables includes: Item type, name, the missing permission, and whether or not the field is excluded from the backup.
  • Exclude a single permission in the table.
  • Fix Missing FLS Permissions for Backup
    Ensure your Salesforce Backup service can access all necessary data by fixing missing field-level security (FLS) permissions. Identify inaccessible data for your backup service's authenticated user and then update the user's permission set with the missing field permissions.
  • Add Missing Permissions Identified in the Permissions Report
    Make sure that your Salesforce backups are complete and available for recovery by giving the authenticated user access to all necessary fields.