“Who can actually see what? And who pays for it?”
8 field notes on security & licences
You're probably paying $50k to $250k a year for licences nobody uses
Most orgs aren't bleeding money on big strategic decisions. They're bleeding money on the boring stuff nobody checks. License cost optimization is one of the easiest wins in Salesforce, and…
Read field note Security & licences · 1 minNobody thinks about the Apps they installed three years ago and forgot
That's the problem, every AppExchange Package sitting in your Org from a project that ended, a trial that never got cleaned up, a vendor relationship that quietly ended, is not neutral. It…
Read field note Security & licences · 1 minSecurity cleanup is about deciding what is even in the room
It is about deciding what is even in the room.
Read field note Security & licences · 1 minYour Security Model Has Clutter to Clean
A good security cleanup starts by removing security clutter. Security clutter contains unused Profiles, orphaned Permission Sets, Permission Set Groups nobody's assigned to, and the List…
Read field note Security & licences · 1 minNo Object should ever be External Public. Not directly. Not indirectly
Not through a OWD, Sharing Rule, not through "View All" checked on a Profile or Permission Set to save time and not even via Flow/LWC running in system mode.
Read field note Security & licences · 1 minNobody budgets for the cleanup that actually gets you breached
Almost every Org has the same story. Permission Sets copied from a departed Admin, never revisited. Sharing Rules built for a re-org that happened three years ago. Guest User Object access…
Read field note Security & licences · 1 minGreat Salesforce Org Cleanup starts with Security!
What I appreciate is the focus on Security as the bedrock of a clean org. Before we talk about anything else, we need to make sure the foundation is solid.
Read field note Security & licences · 1 minFriends don't let friends Set View-All
You’ve set your Account OWD to Private. You’ve tightened your Sharing Rules. You feel secure. Then, someone says: "We just need 'View All' on this one child Object." You think: "It’s fine,…
Read field noteMore topics
Let's open your Org together.
You don't need to fix everything. You need to fix the right things first. In 60 minutes we find them, and you leave with a score you can take into your next leadership meeting.