Newer Version Available
Control Access to Browser Features
To control whether requests to an external (non-Salesforce) server or URL can access the
user’s camera and microphone, enable the Permissions-Policy HTTP header. Then select when to allow
access to each of these browser features.
| Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience |
| Available in: Contact Manager, Group, Professional, Enterprise, Performance, Unlimited, and Developer Editions |
| User Permissions Needed | |
|---|---|
| To modify session security settings: | Customize Application |
- From Setup, in the Quick Find box, enter Session Settings, and then select Session Settings.
-
In the Browser Feature Permissions section, select Include Permissions-Policy
HTTP header.
When this setting is disabled, all external apps and websites loaded from Salesforce can access the user’s camera and microphone.
-
For Camera and Microphone, select when requests from Salesforce can access the browser
feature.
-
For the most granular control over access to this browser feature, select
Trusted URLs Only.
After you select this recommended setting, specify trusted URLs and the browser features that they can access from the Trusted URLs Setup page.
- To grant access to this browser feature for all external apps and websites loaded from Salesforce, select Always.
-
To block access to the browser feature for all external apps and websites loaded from
Salesforce, select Never.
If you select Never, even scripts from Salesforce domains can’t access the browser feature.
-
For the most granular control over access to this browser feature, select
Trusted URLs Only.
- Save your changes.