New event IDs and Transaction Security Policy controls improve the overall security posture of orgs and their users.
- Gain Deeper Insight with GraphQL Query Events
GraphQL query event log files contain information about executed queries, including total execution time, the number of invocations, and any reported errors. This event data improves admin observability, enhancing org performance and security. - Streaming of Login Events Available to All Customers
All customer orgs now have access to LoginEvent streaming. This allows them to have real-time visibility into login activities, which can be streamed easily. Storage is only available with a Shield or Event Monitoring license. - Modify Transaction Security Policy Permission
The new Modify Transaction Security Policy (TSP) permission provides an extra layer of control and security for your policies. This permission is required to create, delete, and update TSPs, and it supports Step-up Authentication for additional security. Users with only the Customize Application permission are now restricted to view-only access. - New Profile and Role IDs
Profile ID and Role ID have been added as new fields to all real-time events. This enhancement offers deeper user insights, enabling you to build Transaction Security Policies (TSPs) more quickly and declaratively. - Report Export Transaction Security Policy
A new Transaction Security Policy (TSP) is available to enhance data protection across all orgs. This policy monitors report events and triggers Step-up Authentication if a user attempts to export more than 10,000 records through the user interface. - TSP Notification Requirement Change
The requirement for a notification user in Transaction Security Policies (TSPs) is now optional. Existing policies are not effected. - Monitor Administrative Changes to Profiles with Transaction Security Policies
Maintain a robust auditing framework and monitor elevated security privileges using Transaction Security Policies. Generate tracking events and block unauthorized changes in real time when salesforce admins modify or create user profiles with critical permissions. Track the specific removal of the TransactionSecurity Exempt permission.