search

sorenkrabbe / Chrome-Salesforce-inspector

Chrome extension to add a metadata layout on top of the standard Salesforce UI to improve the productivity and joy of Salesforce configuration, development, and integration.
328 stars 124 forks source link

Need to be able to restrict Inspector within Salesforce to some specific profiles #257

Open nunesfl opened 1 year ago

nunesfl commented 1 year ago

Hello @sorenkrabbe ! This is an amazing tool, thanks for having developed it ! I was requested to restrict access to Saleforce through Inspector to some specific profiles, but I am not finding how to do it. I can see other tools in my connected apps setup session, in the user OAuth session too... but I can not find a way to restrict the use of it for some users. Reason why I need that is because our company is entering under SOX compliance rules, and one of the audited points is to be able to monitor and allow only some users to reach Salesforce through APIs. Any help for giving me directions on how to restrict the use of Inspector for some specific users or profiles will by highly appreciated. Thank you ! Fernando

tprouvot commented 1 year ago

Hi Fernando, this functionality is available in the fork of inspector available in the chrome web store: Salesforce Inspector Reloaded

https://chrome.google.com/webstore/detail/salesforce-inspector-relo/hpijlohoihegkfehhibggnkbjhoemldh

https://github.com/tprouvot/Salesforce-Inspector-reloaded/wiki/How-to

nunesfl commented 1 year ago

Sorry @tprouvot , may be I could not be so clear that I was intending to try to use Salesforce setup to restrict users using the Chrome Extension to reach out Salesforce due to SOX requirements. Is there any setup inside Salesforce I can use in order to control who can use and not the Inspector Chrome Extension with Salesforce ?

tprouvot commented 1 year ago

Sorry @tprouvot , may be I could not be so clear that I was intending to try to use Salesforce setup to restrict users using the Chrome Extension to reach out Salesforce due to SOX requirements. Is there any setup inside Salesforce I can use in order to control who can use and not the Inspector Chrome Extension with Salesforce ?

Yes this is exactly what I mentioned. First you need to restrict api access, then create a connected app for Salesforce Inspector Reloaded, the configure consumer key in the extension

ecordoba-sfi commented 11 months ago

Removing API Enable permission could be the option you can use

Hello @sorenkrabbe ! This is an amazing tool, thanks for having developed it ! I was requested to restrict access to Saleforce through Inspector to some specific profiles, but I am not finding how to do it. I can see other tools in my connected apps setup session, in the user OAuth session too... but I can not find a way to restrict the use of it for some users. Reason why I need that is because our company is entering under SOX compliance rules, and one of the audited points is to be able to monitor and allow only some users to reach Salesforce through APIs. Any help for giving me directions on how to restrict the use of Inspector for some specific users or profiles will by highly appreciated. Thank you ! Fernando