Give permission to select users to run C&P reports

[CnP.LiveSupport.AB]

Hi Ilene,

Salesforce did not send you to us because the issue had to do with us.
updating
Salesforce Reports reports on the data that is in their platform. The data is there - they simply told you it was our issue because our app adds that data . But it is Salesforce Security that is controlling which of those records are exposed in their reports and which are not - and it should be their responsibility to support that.

But setting that aside - your issue is that your user was unable to see the report created for data records in two objects: the C&P Transaction object and the Opportunity object.

The most recent release of Salesforce began enforcing certain security at the field level - meaning that not only did users have to be able to 'create', 'read', 'update', and 'delete' Opportunities in general, in addition - they needed 'create', 'read', 'update', and 'delete' permissions for every individual field on the Opportunity.

There are several 'native' fields on the Opportunity that the Connected User and any users that process Temporary Contacts must have permission for, and we cannot programmatically add these to a permission set. These are: Account Name, Amount, Lead Source, Primary Campaign Source, & Quantity.

I'll post back later today the screenshot of where these are changed in the post-installation, so you can review and decide which profiles to remove them from, and if you like, you can create your own permission set to open up those specific native fields.

Sincerely, Amanda
C&P Customer Advocate

[CnP.LiveSupport.AB]

OK Ilene,

For users to process Temporary Contacts, our post installation has to review the field level settings for these standard Opportunity fields:

• Account Name
• Amount
• Lead Source
• Primary Campaign Source
• Quantity

To do this:

1. click the Setup gear icon
2. click Object Manager tab
3. type Opportunity in the Quick Find. (in some instances, it may be Donations instead)
4. Click Opportunity
5. Click Fields & Relationships
6. Type the specific field (one of the ones listed above) in the Quick Find box
7. Click the chosen field
8. Click the button to "Set Field Level Security"

Make sure the Field Level Security is set to visible for all profiles that may need to process Temporary Contacts. In post installation, we usually assign these for all profiles, as we do not know which profiles might be used for users that will process Temporary Contacts.

Repeat for all the fields listed above.

This does not change the overall access a profile has for the Opportunity object as a whole - only whether or not the field is visible when they do have access.





So this is what was done during your post installation. If you would prefer to set this via permission sets, you can remove the settings on these fields for the profiles you are concerned about, and create a custom permission set to use to assign field level permissions for these "native" Salesforce fields instead. Unfortunately, we can't just add that to the permission sets that install with our apps because our applications would be de-listed from the AppExchange if we took this strategy.

Hope that helps,
Amanda
C&P Customer Advocate

[[email protected]]

Amanda, thank you for your explanation and for the screenshots. That is very helpful!