Salesforce Security Guide

Clouds with binary code floating aboveCloud with binary code floating above

No Results

Search Tips:

  • Please consider misspellings
  • Try different search keywords
Salesforce Security Guide
Salesforce Security Basics
Authenticate Users
Give Users Access to Data
Share Objects and Fields
Strengthen Your Data’s Security with Shield Platform Encryption
Audit and Monitor Your Organization’s Security
Real-Time Event Monitoring
Real-Time Event Monitoring Definitions
Considerations for Using Real-Time Event Monitoring
Enable Access to Real-Time Event Monitoring
Stream and Store Event Data
Create Logout Event Triggers
How Chunking Works with ReportEvent and ListViewEvent
Enhanced Transaction Security
Types of Enhanced Transaction Security Policies
ApiEvent Policies
ApiAnomalyEventStore Policies
BulkApiResultEventStore Policies
CredentialStuffingEventStore Policies
FileEvent Policies
ListViewEvent Policies
LoginEvent Policies
PermissionSetEventStore Policies
ReportEvent Policies
ReportAnomalyEventStore Policies
SessionHijackingEventStore Policies
Enhanced Transaction Security Actions and Notifications
Build a Transaction Security Policy with Condition Builder
Create an Enhanced Transaction Security Policy That Uses Apex
Best Practices for Writing and Maintaining Enhanced Transaction Security Policies
Enhanced Transaction Security Metering
Exempt Users from Transaction Security Policies
Test and Troubleshoot Your New Enhanced Policy
Threat Detection
Event Log File Browser
Store and Query Log Data with Event Log Objects
Security Guidelines for Apex and Visualforce Development
API End-of-Life Policy
PDF

ListViewEvent Policies

List View event policies monitor when data is viewed or downloaded from your list views using Salesforce Classic, Lightning Experience, or the API.
Available in both Salesforce Classic (not available in all orgs) and Lightning Experience.
Available in: Enterprise, Unlimited, and Developer Editions

Requires Salesforce Shield or Salesforce Event Monitoring add-on subscriptions.

Policy at a Glance

Object Conditions Available in Condition Builder Actions
ListViewEvent Application Name, Developer Name, Event Source, List View ID, Name, Name of Columns, Number of Columns, Order By, Owner ID, Queried Entities, Rows Processed, Scope, Session Level, Source IP, User ID, Username Block, Notifications, Multi-Factor Authentication (for UI logins)

Multi-factor authentication isn’t supported for list views in Lightning pages, so the action is upgraded to Block.

What You Can Do With It

Create a policy that can:

  • Block a user who tries to access a list view of sensitive patent data
  • Notify you if a user exports more than 5,000 rows from a list view in your org

The values captured by transaction security policies are unique API names that can be retrieved by performing REST API Describe calls on the object. When creating a ListViewEvent policy, make sure that the values you want the conditions to check for are unique API names and not display labels. For example, a “Name of Column” condition checks for values that match the metadata information retrieved from a Describe call on the report, not the column headers displayed on the report. Refer to the REST API Developer Guide for more information.

Note