Cohesity Alta SaaS Protection Administrator's Guide

System Permissions

Access Activities.

Data

Access tasks, events, calendar, and email.

Protection (backup and restore) of Tasks, Events, Calendar, and Email.

Access Libraries.

Data

Access libraries.

Protection of Libraries.

Apex REST Services

Data

Allow access to Apex REST services.

Access to Salesforce APIs

API Enabled.

Data and Metadata

Access any Salesforce.com API.

To access Salesforce APIs for backup and restore of Data and Metadata.

Assign Topics.

Data

Assign existing topics to feed items. Remove topics from feed items.

Restore of FeedItem (while assigning a topic to FeedItem)

Author Apex.

Metadata

Create Apex classes and triggers.

Restore of Apex classes and Triggers.

Change Dashboard Colors.

Metadata

Choose a dashboard color theme and palette.

Restore of Dashboards.

Chatter Internal User.

Data

Use all Chatter features.

Protection of Chatter Objects.

Create and Own New Chatter Groups.

Data

Create and own new Chatter groups.

Restore of Chatter Groups (CollationGroup Standard object).

Create Content Deliveries.

Data

Create content delivery links to share files that aren't managed by a library. To let a user create content deliveries for files in a library, enable Deliver Content for that user in the library.

Protection of Salesforce Orgs where the Content Delivery feature is enabled. Restore of public link Field for the Document/Attachment requires this.

Create Folders for Lightning Email Templates.

Metadata

Create Folders for Lightning Email Templates.

Restore of Email Template (in Folder).

Create Public Links.

Data

Let users create links to share files externally. Unlike content deliveries, public links can't be password protected. To let a user create links to files in a library, enable Deliver Content for that user in the library.

Restore of Public Links of Documents / Attachments / Files.

Create Topics.

Data

Create new topics by assigning them to feed items.

Restore of FeedItem (while assigning a topic to FeedItem).

Customize Application.

Metadata

Customize the organization using App Setup menu options.

'Required for 'Connected App' backup. Restore of various Metadata types, for example Custom Fields, Page Layout, and so on.

Edit HTML Templates.

Metadata

Edit Classic HTML Email Templates.

Restore of Email Templates.

Edit Read-Only Fields.

Data

Edit fields that are read only due to page layouts or field-level security.

Restore values back into some fields that are read-only due to page layout or field-level security.

Edit Tasks.

Data

Create, edit, and delete tasks.

Restore of Tasks.

Edit Topics.

Data

Edit topic names and descriptions.

Restore of Topics.

Manage All Private Reports and Dashboards.

Metadata

Allows full access to reports and dashboards in all other users' private folders (API only).

Restore to reports and dashboards in all other users' private folders (API only).

Manage Auth. Providers.

Metadata

Create and edit Auth. Providers.

Restore of Auth Providers.

Manage Certificates.

Metadata

Ability to manage certificates.

Protection of Certificates.

Manage Chatter Messages and Direct Messages.

Data

Access all users' messages sent in Chatter.

Protection of Chatter data.

Manage Connected Apps.

Metadata

Manage, create, edit, and delete connected applications.

Restore of Connected Apps.

Manage Custom Permissions.

Metadata

Create, edit, and delete custom permissions.

Restore of PermissionSets and Profiles.

Manage Custom Report Types.

Metadata

Create, edit, and delete custom report types.

Restore of Custom Reports.

Manage Dashboards in Public Folders.

Metadata

Create, edit, delete dashboards, and manage their sharing in all public folders.

Restore of Custom Dashboards.

Manage Data Categories.

Metadata

Create, edit, and delete data categories.

Protection of 'DataCategoryGroup' backup.

Manage Data Integrations.

Data

Monitor or abort Bulk API jobs.

Bulk API management (during backup and restore).

Create Libraries.

Data

Create libraries.

Restore of Library.

Manage Letterhead.

Data and Metadata

Create, edit, and delete letterheads for HTML emails.

Protection of Email Letterheads.

Manage Multi-Factor Authentication in API.

Metadata

Use the API to manage user identity verification methods for multi-factor authentication.

Required for Metadata Backup.

Manage Public Classic Email Templates.

Metadata

Create, edit, and delete text emails, mail merge templates, and folders for public email templates.

Restore of Email Template in Folder.

Manage Public Documents.

Data

Create, edit, and delete folders for public documents.

Restore of Folders for Documents.

Manage Public List Views.

Metadata

Create, edit, and delete public list views.

Restore of List Views.

Manage Reports in Public Folders.

Metadata

Create, edit, delete reports, and manage their sharing in all public folders.

Restore of Reports in Public Folder.

Manage Unlisted Groups.

Data

View and moderate unlisted Chatter groups.

Protection of Unlisted Groups.

Manage Users.

Metadata

Create, edit, and deactivate users, and manage security settings, including profiles and roles.

Restore of Users.

Modify All Data.

Data

Create, edit, and delete all organization data, regardless of sharing settings.

Needed for auto-inclusion of new objects and related objects. Third-party product objects, custom objects as and when they get added to the Org, they will get picked up by ASP only if this permission is given. Some objects (TopicAssignment, FeedRevision, FeedAttachment, Announcement, FeedComment, EntitySubscription) require this permission for query. A few other objects require this permission for Metadata restore.

Modify Metadata through Metadata API Functions.

Metadata

Create, read, edit, and delete org metadata. Users must have appropriate access rights to the metadata they're trying to modify. Be careful if delegating this permission. Some metadata runs in a system context, when object permissions, field-level security, and sharing rules that apply to the user are ignored. For example, Apex runs in a system context.

Metadata restores.

Update Email Messages.

Data

Modify certain email message-related records.

Restore of EmailMessages.

View All Custom Settings.

Metadata

Let users view all custom setting data directly and by the API.

Protection of Custom Settings.

View All Lookup Record Names.

Data

View the record names in lookup fields regardless of sharing settings. Lookup fields include system fields, such as Created By and Last Modified By.

Backup of System Fields.

View All Profiles.

Metadata

View all user profiles, regardless of profile filtering setting.

Backup of Profiles.

View All Data.

Metadata and Data

View all organizational data, regardless of sharing settings.

Backup of Data and Metadata.

View And Edit Converted Leads.

Data

View and edit converted lead records.

Restore of Converted Leads.

View Developer Name

Data

View the DeveloperName field by the API.

Backup of Developer Name field.

View Encrypted Data

Data

View the value of encrypted fields in plain text.

Protection of Encrypted Fields.

App permissions

Edit Case Comments.

Data

Edit their own case comments but not other user's comments.

Restore of CaseComment.

Import Solutions

Data

Import solutions for the organization.

Protection of Solutions.

Manage Cases.

Data

Administer case settings, including Email-to-Case and mass transfer of cases.

Protection of Cases.

Manage Categories.

Data

Define and modify solution categories settings.

Define and modify solution categories settings.

Manage Entitlements.

Data

Enable, create, and update entitlement management items.

Enable, create, and update entitlement management items.

Manage Content Permissions.

Data

Create, edit, and delete library permissions in Salesforce CRM Content.

Create, edit, and delete library permissions in Salesforce CRM Content.

Manage Content Properties.

Data

Create, edit, and delete custom fields in Salesforce CRM Content.

Create, edit, and delete custom fields in Salesforce CRM Content.

Manage Flow.

Data

Allow users to view, create, edit, delete, and activate all flows and flow types in Lightning Experience apps and Setup.

Protection of Workflows

Manage record types and layouts for Files.

Data and Metadata

Create, edit, and delete content types in Salesforce CRM Content.

Create, edit, and delete content types in Salesforce CRM Content.

Manage Salesforce CRM Content.

Data

Create, edit, and delete libraries and library memberships.

Create, edit, and delete libraries and library memberships.

Query All Files

Data

Allows View All Data users to SOQL query all files in the org.

Protection of Documents / Attachments / Files / Salesforce CRM Content.