Newer Version Available

This content describes an older version of this product. View Latest

Control Access to Browser Features

To control whether requests to an external (non-Salesforce) server or URL can access the user’s camera and microphone, enable the Permissions-Policy HTTP header. Then select when to allow access to each of these browser features.
Available in: both Salesforce Classic (not available in all orgs) and Lightning Experience
Available in: Contact Manager, Group, Professional, Enterprise, Performance, Unlimited, and Developer Editions

User Permissions Needed
To modify session security settings: Customize Application
  1. From Setup, in the Quick Find box, enter Session Settings, and then select Session Settings.
  2. In the Browser Feature Permissions section, select Include Permissions-Policy HTTP header.
    When this setting is disabled, all external apps and websites loaded from Salesforce can access the user’s camera and microphone.
  3. For Camera and Microphone, select when requests from Salesforce can access the browser feature.
    1. For the most granular control over access to this browser feature, select Trusted URLs Only.
      After you select this recommended setting, specify trusted URLs and the browser features that they can access from the Trusted URLs Setup page.
    2. To grant access to this browser feature for all external apps and websites loaded from Salesforce, select Always.
    3. To block access to the browser feature for all external apps and websites loaded from Salesforce, select Never.
      If you select Never, even scripts from Salesforce domains can’t access the browser feature.
  4. Save your changes.