dtwo Policy Store

Policies tagged "crm"

salesforce · ingress

Freeze Salesforce Record Deletes

Denies all Salesforce record-deletion capability on the agent channel unless the caller's IdP groups claim contains the placeholder group sf-admins.

salesforcefreeze-destructive-opsingresscrmsoc2

salesforce · ingress

Salesforce Role-Gated Writes

The PF-12 least-privilege baseline for Salesforce.

salesforcerole-gate-writesaccess-controlleast-privilegeingresssoc2gdpr-ccpacrm