Loading
Feature Disruption - Service Cloud VoiceRead More
Feature degradation | Gmail Email delivery failureRead More
Set Up and Maintain Your Salesforce Organization
Table of Contents
Filter by (0)Add
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

            Search all of Salesforce Help
            Search all of Salesforce Help
            Which User Permissions Does Shield Platform Encryption Require?

            You are here:

            1. Salesforce Help
            2. Docs
            3. Set Up and Maintain Your Salesforce Organization

            Which User Permissions Does Shield Platform Encryption Require?

            Assign permissions to your users according to their roles regarding encryption and key management. Some users need permission to select data for encryption, while other users require combinations of permissions to work with certificates or key material. Enable these permissions for user profiles just like you do for any other user permission.

            Required Editions

            Available in both Salesforce Classic (not available in all orgs) and Lightning Experience.
            Available in: Enterprise, Performance, and Unlimited Editions with the Salesforce Shield or Shield Platform Encryption licenses.
            Available for free in Developer Edition.
            Note
            Note This content relates to Shield Platform Encryption. Read about implementing field-level encryption using Shield Extension in Own from Salesforce.
            Manage Encryption Keys Customize Application View Setup and Configuration Manage Certificates
            View Platform Encryption Setup pages Check mark Check mark
            Generate, destroy, export, import, and upload tenant secrets and customer-supplied key material Check mark
            Query the TenantSecret object via the API Check mark
            Edit, upload, and download HSM-protected certificates with the Shield Platform Encryption Bring Your Own Key service Check mark Check mark Check mark
            Enable features on the Encryption Settings page Check mark Check mark

            The Customize Application and Manage Certificates permissions are automatically enabled for users with the System Administrator profile.

            You can require admins to also have the Manage Encryption Keys permission to complete encryption policy tasks. These tasks include changing the encryption scheme on fields, enabling and disabling encryption on fields, files, and attachments, and other data elements. It also applies to enabling features like Database Encryption or Platform Encryption for Data 360.

            To opt in to this feature, you need the Manage Encryption Keys permission, then opt in from the Encryption Settings page.

            1. From Setup, in the Quick Find box, enter Encryption Settings, and then select Encryption Settings.
            2. In the Advanced Encryption Settings section, turn on Restrict Access to Encryption Policy Settings.

              You can also enable Restrict Access to Encryption Policy Settings programmatically. For more information, see PlatformEncryptionSettings in the Metadata API Developer Guide.

            This restriction applies to actions taken through the API or from Setup pages, such as the Encryption Policy page or the Object Manager.

            Note
            Note This page is about Shield Platform Encryption, not Classic Encryption. What's the difference?

            See Also

             
            Loading
            Salesforce Help | Article