---
schema_version: "1"
id: 40416bbb04be37c850ab217a8ac577117357ed535096b1faaae6cad4a8a4cd34
title: Omnistudio Data Mapper and Integration Procedure Security Settings (Managed Package)
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/os_dataraptor_and_integration_procedure_security_settings_1.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.os_dataraptor_and_integration_procedure_security_settings_1.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: efed5ed0b33a8739aa17bb755b187b7c3d4e0657de3eacb4bcfc7868401ea436
description: For the managed package runtime, these settings affect Data Mapper and Integration Procedure security.
products:
  - Omnistudio
release: "264"
---
# Omnistudio Data Mapper and Integration Procedure Security Settings (Managed Package)

For the managed package runtime, these settings affect Data Mapper and Integration Procedure security.

![Managed Package app icon](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-omnistudio_for_managed_packages-264-0-0-production-enus/aa2554ec-624a-4ee6-8da4-6435670e6e62/resources-global/_corporate/images/managedpackageicon.png) This information is for Omnistudio for Managed Packages. For Omnistudio on standard runtime, see [Omnistudio Help](https://help.salesforce.com/s/articleView?id=xcloud.os_omnistudio_standard.htm&language=en_US).

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
        <colgroup>
          <col>
          <col>
          <col>
          <col>
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d350926e49">
              <p style="margin-bottom:0;">Setting</p>
            </th>
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d350926e55">
              <p style="margin-bottom:0;">Description</p>
            </th>
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d350926e61">
              <p style="margin-bottom:0;">Data Type</p>
            </th>
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d350926e67">
              <p style="margin-bottom:0;">Default Value</p>
            </th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="Setting" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e49 ">
              <p style="margin-bottom:0;" id="os_dataraptor_and_integration_procedure_security_settings_1__UUID-14af1eb9-461d-d31a-4f51-c1372e5a6c2a_para-idm263220990372190"><a name="os_dataraptor_and_integration_procedure_security_settings_1__UUID-14af1eb9-461d-d31a-4f51-c1372e5a6c2a_para-idm263220990372190"><!-- --></a>
                <samp class="parmname">DefaultRequiredPermission</samp>
              </p>
            </td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e55 ">
              <p>Specifies the default value for the <samp class="parmname">Required
                  Permission</samp> setting, which determines which users can run
                Data Mappers and Integration Procedures.</p>
              <p>The <samp class="parmname">Required Permission</samp> setting, which you can
                optionally specify when creating a Data Mapper or Integration Procedure,
                overrides this setting.</p>
              <p>If this setting is absent or blank, all users can run any Data Mappers or
                Integration Procedures that don't have <samp class="parmname">Required
                  Permission</samp> values.</p>
              <p>The syntax for this setting matches the <samp class="parmname">Required
                  Permission</samp> syntax. Specify a comma-separated list of custom
                permission names.</p>
              <p style="margin-bottom:0;">For this setting to work in Omnistudio releases before Spring '22 and in
                all Omnistudio for Managed Packages releases, the
                <span class="apiname">VlocityRequiredPermissionCheck</span> class must be
                implemented.
              </p>
            </td>

            <td data-label="Data Type" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e61 ">
              <p style="margin-bottom:0;">String</p>
            </td>

            <td data-label="Default Value" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e67 ">
              <p style="margin-bottom:0;">(none)</p>
            </td>

          </tr>
          <tr class="">
            <td data-label="Setting" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e49 ">
              <p style="margin-bottom:0;">
                <samp class="parmname">CheckCachedMetadataRecordSecurity</samp>
              </p>
            </td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e55 ">
              <p>By default, cached metadata is not secured when Salesforce <a href="https://help.salesforce.com/articleView?id=managing_the_sharing_model.htm&amp;amp;type=0&amp;language=en_US" target="_blank">Sharing Settings</a> or <a href="https://help.salesforce.com/articleView?id=customer_portal_sharing_set.htm&amp;amp;type=5&amp;language=en_US" target="_blank">Sharing Sets</a> are used to control
                access.</p>
              <p style="margin-bottom:0;">This setting is disabled by default. If set to true, this setting performs a
                record-level security check for cached metadata. This check lessens the
                performance benefit of metadata caching slightly. This setting isn't needed if you
                use Custom Permissions to secure access.</p>
            </td>

            <td data-label="Data Type" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e61 ">
              <p style="margin-bottom:0;">True or False</p>
            </td>

            <td data-label="Default Value" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e67 ">
              <p style="margin-bottom:0;">False</p>
            </td>

          </tr>
          <tr class="">
            <td data-label="Setting" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e49 ">
              <samp class="parmname">ObjectAccessCheck</samp>
            </td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e55 ">By default, users can create or update objects in their org through a
              Data Mapper Load, even if they haven't been granted the create and update
              permissions for that specific object. To prevent this, set the value of this
              setting to <kbd>true</kbd>. This setting enforces an internal
              check on the user's object-level permissions and prevents them from creating
              or updating a record through a Data Mapper Load if they don't have explicit
              access to an object.</td>

            <td data-label="Data Type" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e61 ">String</td>

            <td data-label="Default Value" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e67 ">False</td>

          </tr>
          <tr class="">
            <td data-label="Setting" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e49 ">
              <p style="margin-bottom:0;">
                <samp class="parmname">EnforceDMFLSAndDataEncryption</samp>
              </p>
            </td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e55 ">
              <p style="margin-bottom:0;">To automatically enforce field-level security for all Data Mappers, enable
                <kbd>EnforceDMFLSAndDataEncryption</kbd> in the Omni Interaction
                Configuration. See <a href="https://help.salesforce.com/s/articleView?id=xcloud.os_security_for_dataraptors_and_integration_procedures_1.htm&amp;type=5&amp;language=en_US" target="_blank">Security for Omnistudio Data Mappers and
                  Integration Procedures</a>.
              </p>
            </td>

            <td data-label="Data Type" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e61 ">
              <p style="margin-bottom:0;">True or False</p>
            </td>

            <td data-label="Default Value" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e67 ">
              <p style="margin-bottom:0;">(none)</p>
            </td>

          </tr>
          <tr class="">
            <td data-label="Setting" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e49 ">
              <p style="margin-bottom:0;">
                <samp class="parmname">AdvancedOmnistudioAccessCheck</samp>
              </p>
            </td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e55 ">
              <p style="margin-bottom:0;">Validates object-level access, field-level security, and Apex class
                permissions for all users, including guest, authenticated, and non-authenticated
                users, across Omnistudio components. See <a href="https://help.salesforce.com/s/articleView?id=xcloud.os_advanced_security_updates_overview.htm&amp;release=264.0.0&amp;type=5" title="Advanced security checks for Omnistudio for Managed Packages enhance data protection by enforcing stricter validation of access and permissions. When enabled, these checks validate object-level access, field-level security, and Apex class permissions for all users, including guest, authenticated, and non-authenticated users, across Omnistudio components.">Advanced Security Checks for Omnistudio for Managed Packages</a>.</p>
            </td>

            <td data-label="Data Type" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e61 ">
              <p style="margin-bottom:0;">True or False</p>
            </td>

            <td data-label="Default Value" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e67 ">&nbsp;</td>

          </tr>
          <tr class="">
            <td data-label="Setting" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e49 ">
              <p style="margin-bottom:0;">
                <samp class="parmname">ApexClassCheck</samp>
              </p>
            </td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e55 ">
              <p style="margin-bottom:0;">Makes sure that users have explicit Apex class access for any remote actions
                called from Omniscripts or Flexcards. See <a href="https://help.salesforce.com/s/articleView?id=xcloud.os_standard_add_an_apex_class_permissions_checker.htm&amp;type=5&amp;language=en_US" target="_blank">Add an Apex Class Permissions
                  Checker</a>.</p>
            </td>

            <td data-label="Data Type" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e61 ">
              <p style="margin-bottom:0;">True or False</p>
            </td>

            <td data-label="Default Value" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e67 ">&nbsp;</td>

          </tr>
          <tr class="">
            <td data-label="Setting" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e49 ">
              <p style="margin-bottom:0;">
                <samp class="parmname">ApexClassCheckForIP</samp>
              </p>
            </td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e55 ">
              <p style="margin-bottom:0;">In Vlocity Industries managed package orgs, Apex class validation during
                direct Integration Procedure execution is enforced through the
                <span class="apiname">ApexClassCheckForIP</span> flag, as this scenario is not covered by
                the <span class="apiname">ApexClassCheck</span> flag alone. This behaviour applies to
                Insurance (INS), Communications, Media, and Energy (CME), and Financial Services
                Cloud – Insurance (FSC-INS). See <a href="https://help.salesforce.com/s/articleView?id=xcloud.os_ip_advanced_apex_class_check.htm&amp;release=264.0.0&amp;type=5" title="The advanced Apex class check is performed through the ApexClassCheckForIP security flag. The ApexClassCheckForIP flag strengthens Omnistudio security by enforcing Apex class access checks during Integration Procedure execution. This enhancement makes sure that users have the required permissions to run custom Apex classes referenced within Integration Procedures.">Advanced Apex Class Check for Integration Procedures in Omnistudio for Managed Packages</a>.
              </p>
            </td>

            <td data-label="Data Type" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e61 ">
              <p style="margin-bottom:0;">True or False</p>
            </td>

            <td data-label="Default Value" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e67 ">&nbsp;</td>

          </tr>
          <tr class="">
            <td data-label="Setting" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e49 ">
              <p style="margin-bottom:0;">
                <samp class="parmname">EnableQueryWithFLS</samp>
              </p>
            </td>

            <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e55 ">
              <p style="margin-bottom:0;">Enforces FLS for all Salesforce Object Search Language (SOSL) and Salesforce
                Object Query Language (SOQL) queries within Flexcards and Data Mappers, ensuring
                data visibility respects user permissions. See <a href="https://help.salesforce.com/s/articleView?id=xcloud.os_configure_a_data_source_on_a_flexcard_35864.htm&amp;type=5&amp;language=en_US" target="_blank">Set Up a Data Source on a
                  Flexcard</a>.</p>
            </td>

            <td data-label="Data Type" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e61 ">
              <p style="margin-bottom:0;">True or False</p>
            </td>

            <td data-label="Default Value" class="slds-cell-wrap" style="vertical-align:top;" headers="d350926e67 ">&nbsp;</td>

          </tr>
        </tbody>
      </table>

![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-omnistudio_for_managed_packages-264-0-0-production-enus/aa2554ec-624a-4ee6-8da4-6435670e6e62/images/icon_important.png)

Important During the week of February 2, 2026, Salesforce enables the AdvancedOmnistudioAccessCheck, ApexClassCheckForIP, ApexClassCheck, EnforceDMFLSAndDataEncryption, and EnableQueryWithFLS settings by default to enhance org security. Review and prepare your configuration for a seamless transition and to prevent potential service interruptions.