SecurityHealthCheckRisks

Represents your org’s security setting values, risks, and Salesforce-recommended setting values. Only users with the "View Setup and Configuration" user permission can retrieve data from this object. Available in Tooling API version 37.0 and later.

Supported SOAP Calls

query()

Supported REST HTTP Methods

GET

Fields

Field	Details
DurableId	Type string Properties Filter, Group, Nillable, Sort Description Unique identifier for the field. Always retrieve this value before using it, as the value isn’t guaranteed to stay the same from one release to the next. To simplify queries, use this field.
OrgValue	Type string Properties Filter, Nillable, Sort Description The org’s value for the security setting.
OrgValueRaw	Type string Properties Filter, Nillable, Sort Description The org’s value for the security setting as it is stored in the database, usually without units of measure or extra text. For example, if the Minimum Password Length setting’s OrgValue is `8 characters`, the OrgValueRaw is `8`.
RiskType	Type picklist Properties Filter, Group, Nillable, Restricted picklist, Sort Description The level of risk of the org’s security setting value. Valid values are: `HIGH_RISK` `MEDIUM_RISK` `MEETS_STANDARD`
SecurityHealthCheckId	Type string Properties Filter, Group, Nillable, Sort Description The ID of the Health Check score record associated with this field.
Setting	Type string Properties Filter, Group, Nillable, Sort Description The name of the security setting. For example, `Minimum password length`.
SettingGroup	Type string Properties Filter, Group, Nillable, Sort Description The name of the security setting group in which the setting resides in the Setup tree. For example, `Password Policies`.
StandardValue	Type string Properties Filter, Nillable, Sort Description Salesforce-recommended standard value for the security setting.
StandardValueRaw	Type string Properties Filter, Nillable, Sort Description Salesforce-recommended standard value for the security setting as it is stored in the database, usually without units of measure or extra text. For example, if the Minimum Password Length setting’s StandardValue is `8 characters`, the StandardValueRaw is `8`.

Usage

Use this object to query your org’s security setting values, risks, and Salesforce-recommended setting values. Reading security settings and their security status is useful if you have multiple Salesforce applications that require consistency and compliance in their security posture.

This query gets a list of your org’s high risk settings.

1SELECT RiskType, Setting, SettingGroup, OrgValue, StandardValue FROM SecurityHealthCheckRisks where RiskType=’HIGH_RISK’

This query gets your org’s Health Check score and a list of your org’s high risk settings.

1SELECT Score, (SELECT RiskType, Setting, SettingGroup, OrgValue, StandardValue FROM SecurityHealthCheckRisks where RiskType=’HIGH_RISK’) FROM SecurityHealthCheck

This query gets your org’s Health Check score and the security settings that meet the Salesforce baseline standard.

1SELECT Score, (SELECT RiskType, Setting, SettingGroup, OrgValue, StandardValue FROM SecurityHealthCheckRisks where RiskType=’MEETS_STANDARD’) FROM SecurityHealthCheck

This query lists all the values in the Salesforce baseline standard.

1SELECT Setting, SettingGroup, StandardValue FROM SecurityHealthCheckRisks

Force.com Tooling API

SecurityHealthCheckRisks

Supported SOAP Calls

Supported REST HTTP Methods

Fields

Usage