Skip to main content

Analyzing user access

The Security Center is user-first: instead of burying you in abstract findings, it shows you people — who they are, what they can do, and why.

The org's user overview​

Open Security Center and pick an org. Alongside the score card you'll see the users table, riskiest first: each user with their profile, permission sets, a risk rating (High, Medium, Low, or Standard), and their elevated-access chips. Filter by name, profile, risk level, or a specific dangerous permission.

[SCREENSHOT REQUIRED: Org security page with the users table and risk pills]

note

The analysis covers your org's 200 most recently active users, joined with their current permission assignments read live from Salesforce (read-only). If the org can't be reached at that moment, the page tells you rather than showing stale data.

Drilling into one user​

Click a user to see their complete effective access — everything their profile plus all their permission sets add up to — organized in four tabs:

  • System permissions — administrative and system-level permissions, dangerous ones first.
  • Record access — per object: create/read/update/delete rights, with markers for View All and Modify All access that bypasses sharing.
  • Field access — per object: which fields the user can read or edit, with sensitive editable fields flagged.
  • Code access — the Apex classes the user can execute.

For every grant, bluefactory shows where it came from ("Granted via"): the specific profile or permission set responsible. That's the detail that turns an audit finding into an actionable fix — you know exactly which assignment to change.

[SCREENSHOT REQUIRED: A user's access page with the four tabs and "Granted via" sources visible]

Risky permissions, consistently explained​

Dangerous permissions — the kind that bypass sharing rules or expose all data — are rated centrally and described with the same explanation everywhere they appear, so a Modify All Data warning reads the same on a user page, an access page, and in the score's findings.

From a user to an item — and back​

Every object, field, permission, and class name on a user's page is a link. Click it to flip direction: see all users who hold access to that item. See Access lookup.