Salesforce
Inventory Salesforce users, profiles and permission sets, who effectively holds admin powers like Modify All Data, every outside app people have authorized with their Salesforce account, installed packages, where Salesforce sends data, and the login and Setup change history Salesforce deletes after six months.
Questions you can answer 18
Each one is a saved query that ships with ConfigView, reading your Salesforce data on your own server. Ask it in plain English, SQL, Slack or the API.
- Who has Modify All Data in Salesforce?
- Which Salesforce users are effectively admins, including deactivated ones?
- Who can manage users or customize the application in Salesforce?
- Who has failed Salesforce logins this week?
- Is anyone trying to brute-force Salesforce accounts?
- Which deactivated Salesforce users still have connected apps authorized?
- Do any leavers still have Salesforce OAuth tokens?
- Which frozen Salesforce users still have app access?
- Has anyone logged in to Salesforce from a new country?
- Show unusual Salesforce login locations this week
- Which apps connected to Salesforce have not been used in 90 days?
- What Salesforce OAuth authorizations are stale?
- Where does Salesforce send data?
- Which remote sites and named credentials are configured in Salesforce?
- What outside hosts can Salesforce call?
- What changed in Salesforce Setup in the last 30 days?
- Who changed Salesforce permissions or profiles this month?
- Show the Salesforce setup audit trail for the last 30 days
No Salesforce questions match that yet. Try a shorter word.
What ConfigView collects from Salesforce 11
-
Connected Apps
Connected apps installed or created in the org, and how locked down each is: admin-approved users only, refresh-token lifetime, session policy, start URL host.
-
Event Log Files
Which Event Monitoring log files Salesforce produced each day (logins, logouts, API usage and more) and their size. File contents are not downloaded.
-
Installed Packages
AppExchange and other managed packages installed in the org: package name, namespace and installed version.
-
Login History
Every login to the org over the last six months: who, when, from which IP and country, by browser, API or SSO, and whether it succeeded.
-
Authorized Apps (OAuth Tokens)
Every outside app a user has signed in to Salesforce with: the app's name, whose account it acts as, how often and when it was last used. Token values are never read.
-
Outbound Endpoints
Where Salesforce is set up to send data: named credentials, remote site settings and trusted browser sites, with the destination host and whether each is active.
-
Permission Set Assignments
Which user holds which permission set or group, including the one every profile assigns, and when a time-limited assignment expires.
-
Permission Sets
Permission sets, permission set groups and the hidden set behind every profile, with the powerful permissions each grants: Modify All Data, View All Data, Manage Users, Customize Application, Author Apex, API access.
-
Setup Audit Trail
Every configuration change an admin made in Setup over the last six months: what changed, in which area, by whom, and whether they were logged in as someone else.
-
Frozen and Locked Users
Whether each user is frozen by an admin or locked out after failed passwords - frozen users are still active and still count against licences.
-
Users
Every Salesforce user: username, email, active flag, user type, profile, role, licence, last login and when the account was created.