salesforce
9 Dtwo policies tagged "salesforce", including Freeze Salesforce Record Deletes, Salesforce Cap Bulk Data Export. Browse by what the control does rather than which app it targets.
Freeze Salesforce Record DeletesDenies all Salesforce record-deletion capability on the agent channel unless the caller's IdP groups claim contains the placeholder group sf-admins.Salesforce Cap Bulk Data ExportBlocks bulk PII extraction through Salesforce query tools by inspecting the free-text query arguments that are the real policy surface for these servers.Salesforce Deny API Escape HatchesUnconditionally denies the raw-code and raw-API tools exposed by the community Salesforce MCP servers — tools that bypass every object- and argument-level…Salesforce Guard Opportunity Pipeline FieldsKeeps revenue-pipeline moves human-approved.Salesforce Protect Contact FieldsBlocks Salesforce Contact updates that modify protected fields — ownership, account linkage, contact PII, name, and consent flags.Salesforce Query AllowlistRestricts Salesforce SOQL queries so only Account, Contact, and Opportunity records can be retrieved.Salesforce Read-Only AccessRestricts the Salesforce MCP server to read-only access.Salesforce Redact PIIRedacts personal contact information from Salesforce tool responses before they reach the caller.Salesforce Role-Gated WritesThe PF-12 least-privilege baseline for Salesforce.