Loading

Understanding "Query Non Vetoed Files" Permission and File Access

Data pubblicazione: Apr 2, 2026
Descrizione

Issue:

Some users may experience unexpected behavior when trying to access their own files within the Salesforce platform. This can manifest in various ways, including difficulties uploading files through the user interface (UI), accessing files via the REST API, or encountering issues with file access when using Apex code or when saving/previewing a survey after uploading a branding image. Specifically, users might find they are unable to locate files they have uploaded or expect to have access to.

 

Symptoms:

  • Users cannot find their own uploaded files.

  • File access issues occur when using Apex code.

  • File access problems are observed when uploading via the UI.

  • File access problems are seen when accessing files via REST API.
  • Error: "Unable to upload survey branding" after uploading a background image in the survey builder

Cause:

The issue is often related to the "Query Non Vetoed Files" user permission and a related organization-level setting. When both the "Query Non Vetoed Files" permission is enabled for a user and the organization setting to "Enable Files to be ingested into Data Cloud" is also enabled, the system applies a filter. This filter restricts file search results to only those files designated as public.

 

These settings are intended for specific system integrations and are not designed for use with regular user accounts. The "Query Non Vetoed Files" permission is specifically intended for machine-to-machine (M2M) integrations that handle data ingestion into Data Cloud. It's not meant for individual users, including administrators.

 

Solution:

To resolve the problem, deactivate the "Query Non Vetoed Files" user permission for any affected users, including administrators. This permission is not necessary for typical user file access and should only be enabled for specific integration users that are designed to ingest data into Data Cloud. By disabling this permission for regular users, the standard file access behavior will be restored, and users should be able to access their files as expected.

 

Key Takeaway:

The 'Query Non Vetoed Files' permission is intended for machine-to-machine (M2M) integrations — system-to-system connections that ingest data into Data Cloud without human user interaction.

Risoluzione

Steps to resolve

  1. Navigate to the user's details page in Setup and click on "View Summary."

  2. Go to the "User Permissions" tab and search for "Query Non Vetoed Files".

  3. If the permission is enabled, it will appear in the search results. Click on the actions button (chevron) next to the permission and select "Access Granted By." This will show the profile or permission set that grants the permission.

  4. Edit the identified profile or permission set and disable the "Query Non Vetoed Files" permission.

 

Additional Information

 

The "Enable Files to be ingested into Data Cloud" setting can be found under Setup > Salesforce Files > General Settings. This setting, in conjunction with the user permission, triggers the file visibility restriction.

 

When "Query Non Vetoed Files" permission is assigned to a user and "Enable Files to be ingested into Data Cloud" setting is enabled it will cause a user that has "View All Data" and "Query All Files" permissions to not be able to access the File in the Lightning UI. However, the record can be opened when switching to the Classic UI,

Additionally, no records will be returned when querying the files.

 

Numero articolo Knowledge

004517924

 
Caricamento
Salesforce Help | Article