Field Notes · Security & licences

Salesforce security and licence cleanup

Access accumulates the same way Fields and Flows do: quietly, one "just give them the permission for now" at a time. These field notes cover Profiles, Permission Sets, Sharing, implicit data exposure, forgotten AppExchange packages and the licences nobody uses anymore.

“Who can actually see what? And who pays for it?”

8 field notes on security & licences

Security & licences · 2 min

You're probably paying $50k to $250k a year for licences nobody uses

Most orgs aren't bleeding money on big strategic decisions. They're bleeding money on the boring stuff nobody checks. License cost optimization is one of the easiest wins in Salesforce, and…

Read field note
Security & licences · 1 min

Nobody thinks about the Apps they installed three years ago and forgot

That's the problem, every AppExchange Package sitting in your Org from a project that ended, a trial that never got cleaned up, a vendor relationship that quietly ended, is not neutral. It…

Read field note
Security & licences · 1 min

Security cleanup is about deciding what is even in the room

It is about deciding what is even in the room.

Read field note
Security & licences · 1 min

Your Security Model Has Clutter to Clean

A good security cleanup starts by removing security clutter. Security clutter contains unused Profiles, orphaned Permission Sets, Permission Set Groups nobody's assigned to, and the List…

Read field note
Security & licences · 1 min

No Object should ever be External Public. Not directly. Not indirectly

Not through a OWD, Sharing Rule, not through "View All" checked on a Profile or Permission Set to save time and not even via Flow/LWC running in system mode.

Read field note
Security & licences · 1 min

Nobody budgets for the cleanup that actually gets you breached

Almost every Org has the same story. Permission Sets copied from a departed Admin, never revisited. Sharing Rules built for a re-org that happened three years ago. Guest User Object access…

Read field note
Security & licences · 1 min

Great Salesforce Org Cleanup starts with Security!

What I appreciate is the focus on Security as the bedrock of a clean org. Before we talk about anything else, we need to make sure the foundation is solid.

Read field note
Security & licences · 1 min

Friends don't let friends Set View-All

You’ve set your Account OWD to Private. You’ve tightened your Sharing Rules. You feel secure. Then, someone says: "We just need 'View All' on this one child Object." You think: "It’s fine,…

Read field note

More topics

Free · 60 minutes · No prep

Let's open your Org together.

You don't need to fix everything. You need to fix the right things first. In 60 minutes we find them, and you leave with a score you can take into your next leadership meeting.