Cohesity Alta SaaS Protection Administrator's Guide

Access Activities

Data

Access tasks, events, calendar, and email.

Protection (backup and restore) of Tasks, Events, Calendar and Email

Access Libraries

Data

Access libraries.

Protection of Libraries

Apex REST Services

Data

Allow access to Apex REST services

Access to Salesforce APIs

API Enabled

Both

Access any Salesforce.com API.

To access Salesforce APIs for backup and restore of Data and Metadata

Assign Topics

Data

Assign existing topics to feed items. Remove topics from feed items.

Restore of FeedItem (while assigning a topic to FeedItem)

Author Apex

Metadata

Create Apex classes and triggers.

Restore of Apex classes and Triggers

Change Dashboard Colors

Metadata

Choose dashboard color theme and palette.

Restore of Dashboards

Chatter Internal User

Data

Use all Chatter features.

Protection of Chatter Objects

Create and Own New Chatter Groups

Data

Use all Chatter features.

Protection of Chatter Objects

Create Content Deliveries

Data

Create content delivery links to share files that aren't managed by a library. To let a user create content deliveries for files in a library, enable Deliver Content for that user in the library.

Protection of Salesforce Orgs where Content Delivery feature is enabled. Restore of public link Field for the Document/Attachment requires this.

Create Folders for Lightning Email Templates

Metadata

Create Folders for Lightning Email Templates.

Restore of Email Template (in Folder)

Create Libraries

Data

Create libraries.

Restore of Library

Create Public Links

Data

Let users create links to share files externally. Unlike content deliveries, public links can't be password protected. To let a user create links to files in a library, enable Deliver Content for that user in the library.

Restore of Public Links of Documents / Attachments / Files

Create Topics

Data

Create new topics by assigning them to feed items.

Restore of FeedItem (while assigning a topic to FeedItem)

Customize Application

Metadata

Customize the organization using App Setup menu options.

Required for 'Connected App' backup. Restore of various Metadata types, for example, Custom Fields, Page Layout and so on.

Edit HTML Templates

Metadata

Edit Classic HTML Email Templates.

Restore of Email Templates

Edit Read Only Fields

Data

Edit fields that are read only due to page layouts or field-level security.

Restore values back into some fields that are read-only due to page layout or field level security

Edit Tasks

Data

Create, edit, and delete tasks.

Restore of Tasks

Edit Topics

Data

Edit topic names and descriptions.

Restore of Topics

Manage All Private Reports and Dashboards

Metadata

Allows full access to reports and dashboards in all other users' private folders (API only).

Restore to reports and dashboards in all other users' private folders (API only).

Manage Auth. Providers

Metadata

Create and edit Auth. Providers

Restore of Auth Providers

Manage Certificates

Metadat

Ability to manage certificates

Protection of Certificates

Manage Chatter Messages and Direct Messages

Data

Access all users' messages sent in Chatter.

Protection of Chatter data

Manage Connected Apps

Metadata

Manage, create, edit, and delete connected applications.

Restore of Connected Apps

Manage Custom Permissions

Metadata

Create, edit, and delete custom permissions.

Restore of Permission Sets and Profiles

Manage Custom Report Types

Metadata

Create, edit, and delete custom report types.

Restore of Custom Reports

Manage Dashboards in Public Folders

Metadata

Create, edit, delete dashboards, and manage their sharing in all public folders.

Restore of Custom Dashboards

Manage Data Categories

Metadata

Create, edit, and delete data categories.

Protection of 'DataCategoryGroup' backup

Manage Data Integrations

Data

Monitor or abort Bulk API jobs.

Bulk API management (during backup and restore)

Manage Letterhead

Both

Create, edit, and delete letterheads for HTML emails.

Protection of Email Letterheads.

Manage Multi-Factor Authentication in API

Metadata

Use the API to manage user identity verification methods for multi-factor authentication.

Required for Metadata Backup

Manage Public Classic Email Templates

Metadata

Create, edit, and delete text emails, mail merge templates, and folders for public email templates.

Restore of Email Template in Folder

Manage Public Documents

Data

Create, edit, and delete folders for public documents.

Restore of Folders for Documents

Manage Public List Views

Metadata

Create, edit, and delete public list views

Restore of List Views

Manage Reports in Public Folders

Data

Create, edit, delete reports, and manage their sharing in all public folders.

Restore of Reports in Public Folder

Manage Unlisted Groups

Metadata

View and moderate unlisted Chatter groups.

Protection of Unlisted Groups

Manage Users

Metadata

Create, edit, and deactivate users, and manage security settings, including profiles and roles.

Restore of Users

Modify All Data

Data

Create, edit, and delete all organization data, regardless of sharing settings

Needed for auto-inclusion of new objects and related objects. Third party product objects, custom objects as and when they get added to the Org, they will get picked up by Alta SaaS Protection only if this permission is given. Also, some objects (TopicAssignment, FeedRevision, FeedAttachment, Announcement, FeedComment, EntitySubscription) require this permission for query. A few other objects require this permission for Metadata restore.

Modify Metadata through Metadata API Functions

Metadata

Create, read, edit, and delete org metadata. Users must have appropriate access rights to the metadata they're trying to modify. Be careful if delegating this permission. Some metadata executes in system context, when object permissions, field-level security, and sharing rules that apply to the user are ignored. For example, Apex executes in system context.

Metadata restores

Update Email Messages

Data

Modify certain email message related records.

Restore of Email Messages

View All Custom Settings

Metadata

Let users view all custom setting data directly and via the API.

Protection of Custom Settings

View All Lookup Record Names

Data

View the record names in lookup fields regardless of sharing settings. Lookup fields include system fields, such as Created By and Last Modified By.

Backup of System Fields

View All Profiles

Metadata

View all user profiles, regardless of profile filtering setting.

Backup of Profiles

View And Edit Converted Leads

Data

View and edit converted lead records.

Restore of Converted Leads

View Developer Name

View the DeveloperName field via the API.

Backup of Developer Name field

View Encrypted Data

Data

View the value of encrypted fields in plain text.

Protection of Encrypted Fields

Edit Case Comments

Data

Edit their own case comments but not other user's comments.

Restore of CaseComment

Import Solutions

Data

Import solutions for the organization.

Protection of Solutions

Manage Cases

Data

Administer case settings, including Email-to-Case and mass transfer of cases.

Protection of Cases

Manage Categories

Data

Define and modify solution categories settings.

Define and modify solution categories settings.

Manage Entitlements

Data

Enable, create, and update entitlement management items.

Enable, create, and update entitlement management items.

Manage Content Permissions

Data

Create, edit, and delete library permissions in Salesforce CRM Content.

Create, edit, and delete library permissions in Salesforce CRM Content

Manage Content Properties

Data

Create, edit, and delete custom fields in Salesforce CRM Content.

Create, edit, and delete custom fields in Salesforce CRM Content

Manage Flow

Data

Allow users to view, create, edit, delete, and activate all flows and flow types in Lightning Experience apps and Setup.

Protection of Workflows

Manage record types and layouts for Files

Both

Create, edit, and delete content types in Salesforce CRM Content..

Create, edit, and delete content types in Salesforce CRM Content.

Manage Salesforce CRM Content

Data

Create, edit, and delete libraries and library memberships.

Create, edit, and delete libraries and library memberships.

Query All Files

Data

Allows View All Data users to SOQL query all files in the org.

Protection of Documents / Attachments / Files / Salesforce CRM Content