Do Not Grant “View All Data” Permission on Any Object

Impact Area

Security

 

Severity

High

 

Affected Element

Profile

Permission Set

Rule ID #

SF-AVOID-USE-VIEW-ALL-DATA-PERMISSION

Description #

Do Not Grant “View All Data” Permission on Any Object

Impact #

Granting “View All Data” on any object can expose all data within that object without proper authorization, leading to severe security risks. This rule may raise an issue for each object where this permission is present.

Remediation #

Ensure that “View All Data” permissions for any object in Profiles and Permission Sets are reviewed and approved by the CoE.

Time to fix #

30 min

Scan Type #

All scans

Was it helpful ?

THE AI CODE GOVERNANCE BRIEF

Sign up for new updates!