Retain a secure Salesforce environment and reduce the risk of unwanted changes to security settings by designating users as read-only. Give stakeholders access to security insights and permission to download lens-related data, without the ability to run jobs, configure risk ratings, or update scoring policies.
Admins can create a read-only user by assigning the "Own Secure Security Insights Read Only" permission set. These users should be created using the default Standard or Read-Only equivalent Salesforce users profiles to avoid any unnecessary risk. Audit, Compliance, and InfoSec users typically do not require full access to perform their duties.
- Create a user in Salesforce.
- Assign the "Own Secure Security Insights Read Only" permission set to the new user.
- Navigate to the App Manager in Setup for Own Secure and ensure that it is assigned to the profile assigned to the user.
- Sign in as the user and navigate to Secure.
-
Security Insights should be the only available tab. Select Security Insights.
A banner is displayed for read-only users.
If a user is not properly configured, they may encounter a User Access Issue modal. For read-only users, this occurs when the "SI Admin" permission has been assigned. To resolve this access issue, remove the "SI Admin" permission.