Impact Area
Security
Severity
High
Affected Element
Profile
Permission Set
Rule ID #
SF-AVOID-API-ONLY-USER-PERMISSION
Description #
Do Not Grant “API Only User” Permission
Impact #
Granting “API Only User” permission can allow users to access API functionality, bypassing user interface restrictions and creating security vulnerabilities.
Remediation #
Ensure that “API Only User” permissions in Profiles and Permission Sets are reviewed and approved by the CoE.
Time to fix #
5 min
Scan Type #
All scans
