PermissionSetEventStore Policies

Policy at a Glance

What You Can Do with It

Create a transaction security policy that can prevent users from being assigned these permissions in a permission set or a profile:

• AssignPermissionSets (Assign Permission Sets)
• AuthorApex (Author Apex)
• CustomizeApplication (Customize Application)
• ForceTwoFactor (Multi-Factor Authentication for User Interface Logins)
• FreezeUsers (Freeze Users)
• ManageAccessPolicies (Grants users access to view, create, edit, and delete Enforcement Policies)
• ManageDataspaceScope (Grants users access to view, create, edit, and delete a Dataspace Scope)
• ManageEncryptionKeys (Manage Encryption Keys)
• ManageInternalUsers (Manage Internal Users)
• ManagePasswordPolicies (Manage Password Policies)
• ManageProfilesPermissionsets (Manage Profiles and Permission Sets)
• ManageRoles (Manage Roles)
• ManageSharing (Manage Sharing)
• ManageUsers (Manage Users)
• ModifyAccessAllowPolicies (Create, edit, and delete Allow policies in the Data Governance tab)
• ModifyAccessDenyPolicies (Create, edit, and delete Deny policies in the Data Governance tab)
• ModifyAllData (Modify All Data)
• ModifyAllDataGovPolicies (Create, edit, and delete policies in the Data Governance tab)
• ModifyAllDataGovTagAssign (Create, edit, and delete tag assignments in the Data Governance tab)
• MonitorLoginHistory (Monitor Login History)
• PasswordNeverExpires (Password Never Expires)
• ResetPasswords (Reset User Passwords and Unlock Users)
• TransactionSecurityExempt (Exempt from Transaction Security)
• ViewAllData (View All Data)

Note When using this event in a transaction security policy, use the permission's API name, not its label, and use the Contains operator, rather than Equals.