CRM Analytics user permissions and integration users
Which user permission, app access level or system-user setting meets a governance rule: asset permissions such as dashboards, downloads and dataset security, permission set groups with muting, Integration User and Security User field access, column restriction by dataset and app, and Experience Cloud member licensing.
Given governance and CRM Analytics asset security requirements, implement necessary security settings for users, groups, and profiles.
~8 min read · 10 practice questions ·
What the exam expects
- Pick the narrowest user permission for an asset task and the app access it still needs.
- Use a permission set group with a muting permission set when one team needs a shared set minus a permission.
- Keep a sensitive field out of every dataset through the Integration User, and let a predicate read custom User fields through the Security User.
- Restrict a column for some users with a separate dataset and app.
- State which Experience Cloud users can view embedded dashboards and what they need.
Key terms: user permission (what a user can do); app access (Viewer, Editor or Manager on the app that holds an asset); Integration User (internal user whose permissions extract Salesforce data); Security User (internal user that reads the User object when a predicate is evaluated); muting permission set (switches off selected permissions inside one permission set group).
Key facts
- Detail
- Use CRM Analytics and Editor access to the dataset's app
- Detail
- Edit CRM Analytics Dataflows
- Detail
- Edit CRM Analytics Dataflows (Edit a Dataset) or Manage CRM Analytics (Restore page)
- Detail
- Editor or Manager plus the dashboard permission
- Detail
- Up to one
- Detail
- View All Data; a job extracting an unreadable field fails
- Detail
- Reads standard User fields; custom fields need read granted
- Detail
- Not preserved in datasets
- Detail
- Clone the profile, edit Read, assign the clone
- Detail
- Customer Community Plus, Partner Community, Lightning External Apps Plus; no guests
Sources for this section (8)
- Edit a Datasethelp.salesforce.com (opens in a new tab)
- Restore a Dataset Versionhelp.salesforce.com (opens in a new tab)
- App-Level Sharinghelp.salesforce.com (opens in a new tab)
- Muting Permission Setshelp.salesforce.com (opens in a new tab)
- Salesforce Data Accesshelp.salesforce.com (opens in a new tab)
- CRM Analytics Limitationshelp.salesforce.com (opens in a new tab)
- Control Access to Objects and Fieldshelp.salesforce.com (opens in a new tab)
- Share in Experience Cloud Siteshelp.salesforce.com (opens in a new tab)
- How many muting permission sets can one permission set group contain?
- When must you grant the internal predicate user read on a User field?
- Why does Help ask for discretion before granting the dataflow-editing permission?
- Which permission does the dataset edit page require to restore an earlier dataset version?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the CRM Analytics and Einstein Discovery Consultant pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 26 lessons of the CRM Analytics and Einstein Discovery Consultant guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Practice exams purchase adds inline bank questions and topic practice (10 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Choose guide-only, practice-only, or save $4 with both