Syntax of the Required Permission Property

Omnistudio Data Mappers and Integration Procedures have a Required Permission property, which determines who has runtime access. You can specify roles, profiles, permission sets, custom permissions, or any combination. If Required Permission is blank, any user can run the Data Mapper or Integration Procedure unless the DefaultRequiredPermission property is set.

Important

When a Flexcard, Integration Procedure, or Omniscript calls a Data Mapper or another Integration Procedure, only the required permission of the calling parent component is enforced by Omnistudio. Omnistudio does not automatically enforce the required permission of the child Data Mapper or Integration Procedure. This can lead to security risks if the calling parent component has broader access. To ensure consistent access control, always configure appropriate required permissions on all Flexcards, Integration Procedures, or Omniscripts and their contained actions, especially when handling sensitive data.

The syntax of the Required Permission property is:

prefix:name,prefix:name, ...

The prefix can be Role, Profile, PermSet, or CustomPerm. The name is the name of a role, profile, permission set or permission set group, or custom permission. For example, here’s a Required Permission value that includes two roles and one permission set group:

Role:Architect,Role:Developer,PermSet:OmniStudio Admin Group