Setting this specific extra permission allows a user to view or export sensitive data excerpts in Data Detect scan results.
Required Editions
| Available in: Lightning Experience |
| Available in: Enterprise, Performance, Unlimited, and Developer Editions |
Warning Access to view and export excerpts of sensitive data found in Data Detect
scans is governed by strict, role-based access controls. The 'Manage user access to view
detected sensitive data in the results of the Data Detect scan Permission' is required, and is
turned off by default.
| User Permissions Needed | |
|---|---|
| To view or export excerpts of the sensitive data identified within the results | Manage user access to view detected sensitive data in the results of the Data Detect scan |
Follow security recommendations when using this feature by using the principle of least privilege.
- Grant the required permission only to specific users, such as Data Security Salesforce admins or Internal Auditors, who require it for a defined task.
- Only turn on the user permission during the specific audit or verification task. You can immediately revoke it afterward to minimize the window of data exposure.
- From Setup, search for Permission Sets in Quick Find.
- Click Create New Permission to create a new permission for your user. Or, use an existing permission, depending on your preference.
- After creating the permission, click System Permissions.
- Search for Manage user access to view detected sensitive data in the results of the Data Detect scan, select it, and select Save.
After the task is complete, you can immediately revoke the permission to minimize the window of exposure.