salesforce
10 Dtwo policies tagged "salesforce", including Freeze Salesforce Record Deletes, Salesforce Cap Bulk Data Export. Browse by what the control does rather than which app it targets.
Freeze Salesforce Record DeletesDenies all Salesforce record-deletion capability on the agent channel unless the caller's IdP groups claim contains the placeholder group sf-admins.Salesforce Cap Bulk Data ExportCaps how many records a single agent call can pull out of Salesforce, so an agent (or a prompt injection steering one) can't bulk-export the CRM.Salesforce Deny API Escape HatchesUnconditionally denies the raw-code and raw-API tools exposed by the community Salesforce MCP servers — tools that bypass every object- and argument-level…Salesforce Guard Opportunity Pipeline FieldsKeeps revenue-pipeline moves human-approved.Salesforce Protect Contact FieldsBlocks Salesforce Contact updates that modify protected fields — ownership, account linkage, contact PII, name, and consent flags.Salesforce Query AllowlistRestricts Salesforce SOQL queries so only Account, Contact, and Opportunity records can be retrieved.Salesforce Read-Only AccessRestricts the Salesforce MCP server to read-only access.Salesforce Read-Only Except Call NotesKeeps the Salesforce connection read-only for agents, with one exception: the agent can log a call note against a contact.Salesforce Redact PIIRedacts personal contact information from Salesforce tool responses before they reach the caller.Salesforce Role-Gated WritesThe PF-12 least-privilege baseline for Salesforce.