---
schema_version: "1"
id: cde45c05f9645f957cc14dd0915182d0729a60884f880fc49236cb9fcb47a5b5
title: Omnistudio Data Mapper and Integration Procedure Security Settings (Managed Package)
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/os_dataraptor_and_integration_procedure_security_settings.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.os_dataraptor_and_integration_procedure_security_settings.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: b7b5845c33e9db4b953813951ca27044dbfa893eeef20b1375061deb99077927
description: For the managed package runtime, these settings affect Data Mapper and Integration Procedure security.
products:
  - Omnistudio
release: "264"
---
# Omnistudio Data Mapper and Integration Procedure Security Settings (Managed Package)

For the managed package runtime, these settings affect Data Mapper and Integration Procedure security.

![Managed Package app icon](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-omnistudio_for_managed_packages-264-0-0-production-enus/aa2554ec-624a-4ee6-8da4-6435670e6e62/resources-global/_corporate/images/managedpackageicon.png) This information is for Omnistudio for Managed Packages. For Omnistudio on standard runtime, see [Omnistudio Help](https://help.salesforce.com/s/articleView?id=xcloud.os_omnistudio_standard.htm&language=en_US).

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
        <colgroup>
          <col>
          <col>
          <col>
          <col>
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d111196e49">
              <p style="margin-bottom:0;">Setting</p>
            </th>
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d111196e55">
              <p style="margin-bottom:0;">Description</p>
            </th>
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d111196e61">
              <p style="margin-bottom:0;">Data Type</p>
            </th>
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d111196e67">
              <p style="margin-bottom:0;">Default Value</p>
            </th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="Setting" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e49 ">
              <p style="margin-bottom:0;" id="os_dataraptor_and_integration_procedure_security_settings__UUID-4a597e8b-8e99-144f-af23-73eed4e81b37_para-idm263220990372190"><a name="os_dataraptor_and_integration_procedure_security_settings__UUID-4a597e8b-8e99-144f-af23-73eed4e81b37_para-idm263220990372190"><!-- --></a>
                <samp class="parmname">DefaultRequiredPermission</samp>
              </p>
            </td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e55 ">
              <p>Specifies the default value for the <samp class="parmname">Required
                  Permission</samp> setting, which determines which users can run
                Data Mappers and Integration Procedures.</p>
              <p>The <samp class="parmname">Required Permission</samp> setting, which you can
                optionally specify when creating a Data Mapper or Integration Procedure,
                overrides this setting.</p>
              <p>If this setting is absent or blank, all users can run any Data Mappers or
                Integration Procedures that don't have <samp class="parmname">Required
                  Permission</samp> values.</p>
              <p>The syntax for this setting matches the <samp class="parmname">Required
                  Permission</samp> syntax. Specify a comma-separated list of custom
                permission names.</p>
              <p style="margin-bottom:0;">For this setting to work in Omnistudio releases before Spring '22 and in
                all Omnistudio for Managed Packages releases, the
                <span class="apiname">VlocityRequiredPermissionCheck</span> class must be
                implemented. See <a href="https://help.salesforce.com/s/articleView?id=xcloud.os_implement_the_vlocityrequiredpermissioncheck_class.htm&amp;release=264.0.0&amp;type=5" title="For the managed package runtime, for the DefaultRequiredPermission setting to work, you must implement the VlocityRequiredPermissionCheck class manually because Salesforce handles classes in managed and unmanaged packages differently. This class doesn't work properly if it's included in the managed package.">Implement the VlocityRequiredPermissionCheck Class (Managed Package)</a>.
              </p>
            </td>

            <td data-label="Data Type" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e61 ">
              <p style="margin-bottom:0;">String</p>
            </td>

            <td data-label="Default Value" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e67 ">
              <p style="margin-bottom:0;">(none)</p>
            </td>

          </tr>
          <tr class="">
            <td data-label="Setting" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e49 ">
              <p style="margin-bottom:0;">
                <samp class="parmname">CheckCachedMetadataRecordSecurity</samp>
              </p>
            </td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e55 ">
              <p style="margin-bottom:0;">By default, cached metadata is not secured when you use Salesforce <a href="https://help.salesforce.com/articleView?id=managing_the_sharing_model.htm&amp;amp;type=0&amp;language=en_US" target="_blank">Sharing Settings</a> or <a href="https://help.salesforce.com/articleView?id=customer_portal_sharing_set.htm&amp;amp;type=5&amp;language=en_US" target="_blank">Sharing Sets</a> to secure access. If True,
                this setting performs a record-level security check for cached metadata. This
                check lessens the performance benefit of metadata caching slightly. This setting
                isn't needed if you use Custom Permissions to secure access.</p>
            </td>

            <td data-label="Data Type" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e61 ">
              <p style="margin-bottom:0;">True or False</p>
            </td>

            <td data-label="Default Value" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e67 ">
              <p style="margin-bottom:0;">False</p>
            </td>

          </tr>
          <tr class="">
            <td data-label="Setting" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e49 ">
              <p style="margin-bottom:0;">
                <samp class="parmname">EnforceDMFLSAndDataEncryption</samp>
              </p>
            </td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e55 ">
              <p style="margin-bottom:0;">To automatically enforce field-level security for all Data Mappers, enable
                <kbd>EnforceDMFLSAndDataEncryption</kbd> in the Omni Interaction
                Configuration. See <a href="https://help.salesforce.com/s/articleView?id=xcloud.os_security_for_dataraptors_and_integration_procedures_1.htm&amp;type=5&amp;language=en_US" target="_blank">Security for Omnistudio Data Mappers and
                  Integration Procedures</a>.
              </p>
            </td>

            <td data-label="Data Type" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e61 ">
              <p style="margin-bottom:0;">True or False</p>
            </td>

            <td data-label="Default Value" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e67 ">
              <p style="margin-bottom:0;">(none)</p>
            </td>

          </tr>
          <tr class="">
            <td data-label="Setting" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e49 ">
              <p style="margin-bottom:0;">
                <samp class="parmname">AdvancedOmnistudioAccessCheck</samp>
              </p>
            </td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e55 ">
              <p style="margin-bottom:0;">Validates object-level access, field-level security, and Apex class
                permissions for all users, including guest, authenticated, and non-authenticated
                users, across Omnistudio components. See <a href="https://help.salesforce.com/s/articleView?id=xcloud.os_advanced_security_updates_overview.htm&amp;release=264.0.0&amp;type=5" title="Advanced security checks for Omnistudio for Managed Packages enhance data protection by enforcing stricter validation of access and permissions. When enabled, these checks validate object-level access, field-level security, and Apex class permissions for all users, including guest, authenticated, and non-authenticated users, across Omnistudio components.">Advanced Security Checks for Omnistudio for Managed Packages</a>.</p>
            </td>

            <td data-label="Data Type" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e61 ">
              <p style="margin-bottom:0;">True or False</p>
            </td>

            <td data-label="Default Value" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e67 ">
              <p style="margin-bottom:0;">False</p>
            </td>

          </tr>
          <tr class="">
            <td data-label="Setting" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e49 ">
              <p style="margin-bottom:0;">
                <samp class="parmname">ApexClassCheck</samp>
              </p>
            </td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e55 ">
              <p style="margin-bottom:0;">Makes sure that users have explicit Apex class access for any remote actions
                called from Omniscripts or Flexcards. See <a href="https://help.salesforce.com/s/articleView?id=xcloud.os_standard_add_an_apex_class_permissions_checker.htm&amp;type=5&amp;language=en_US" target="_blank">Add an Apex Class Permissions
                  Checker</a>.</p>
            </td>

            <td data-label="Data Type" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e61 ">
              <p style="margin-bottom:0;">True or False</p>
            </td>

            <td data-label="Default Value" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e67 ">
              <p style="margin-bottom:0;">False</p>
            </td>

          </tr>
          <tr class="">
            <td data-label="Setting" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e49 ">
              <p style="margin-bottom:0;">
                <samp class="parmname">ApexClassCheckForIP</samp>
              </p>
            </td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e55 ">
              <p style="margin-bottom:0;">In Vlocity Industries managed package orgs, Apex class validation during
                direct Integration Procedure execution is enforced through the
                <span class="apiname">ApexClassCheckForIP</span> flag, as this scenario is not covered by
                the <span class="apiname">ApexClassCheck</span> flag alone. This behaviour applies to
                Insurance (INS), Communications, Media, and Energy (CME), and Financial Services
                Cloud – Insurance (FSC-INS). See <a href="https://help.salesforce.com/s/articleView?id=xcloud.os_ip_advanced_apex_class_check.htm&amp;release=264.0.0&amp;type=5" title="The advanced Apex class check is performed through the ApexClassCheckForIP security flag. The ApexClassCheckForIP flag strengthens Omnistudio security by enforcing Apex class access checks during Integration Procedure execution. This enhancement makes sure that users have the required permissions to run custom Apex classes referenced within Integration Procedures.">Advanced Apex Class Check for Integration Procedures in Omnistudio for Managed Packages</a>.
              </p>
            </td>

            <td data-label="Data Type" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e61 ">
              <p style="margin-bottom:0;">True or False</p>
            </td>

            <td data-label="Default Value" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e67 ">
              <p style="margin-bottom:0;">False</p>
            </td>

          </tr>
          <tr class="">
            <td data-label="Setting" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e49 ">
              <p style="margin-bottom:0;">
                <samp class="parmname">EnableQueryWithFLS</samp>
              </p>
            </td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e55 ">
              <p style="margin-bottom:0;">Enforces FLS for all Salesforce Object Search Language (SOSL) and Salesforce
                Object Query Language (SOQL) queries within Flexcards and Data Mappers, ensuring
                data visibility respects user permissions. See <a href="https://help.salesforce.com/s/articleView?id=xcloud.os_configure_a_data_source_on_a_flexcard_35864.htm&amp;type=5&amp;language=en_US" target="_blank">Set Up a Data Source on a
                  Flexcard</a>.</p>
            </td>

            <td data-label="Data Type" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e61 ">
              <p style="margin-bottom:0;">True or False</p>
            </td>

            <td data-label="Default Value" class="slds-cell-wrap" style="vertical-align:top;" headers="d111196e67 ">
              <p style="margin-bottom:0;">False</p>
            </td>

          </tr>
        </tbody>
      </table>

![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-omnistudio_for_managed_packages-264-0-0-production-enus/aa2554ec-624a-4ee6-8da4-6435670e6e62/images/icon_important.png)

Important During the week of February 2, 2026, Salesforce enables the AdvancedOmnistudioAccessCheck, ApexClassCheckForIP, ApexClassCheck, EnforceDMFLSAndDataEncryption, and EnableQueryWithFLS settings by default to enhance org security. Review and prepare your configuration for a seamless transition and to prevent potential service interruptions.