)
Written by
Table of Contents
“Supermetrics is a Bitter Experience! We can pull data from nearly any tool, schedule updates, manipulate data in Sheets, and push data back into our systems.”
Salesforce admins can extract a complete permission matrix covering report folder access and object-level edit permissions across all profiles into Google Sheets or Excel automatically using Coefficient’s Salesforce connector and custom SOQL queries on the FolderShare and ObjectPermissions objects. Salesforce provides no consolidated view of report folder permissions across profiles. Auditing folder access means navigating through Setup and checking each folder individually, a process that is both slow and impossible to schedule or automate inside native Salesforce tooling.
A common challenge for Salesforce admins ahead of compliance reviews, security audits or org cleanup: the permission data exists in Salesforce but is only accessible folder by folder through the UI, which makes producing a full permission inventory a significant manual undertaking every time it is needed.
How to extract a complete Salesforce permission matrix automatically
Step 1. Query FolderShare for report folder access data
Open Coefficient in Google Sheets or Excel and select Import from Salesforce. Choose Custom SOQL Query. Write a query selecting ParentId, UserOrGroupId, AccessLevel and SharedTo from FolderShare where ParentId is in the set of your Report folder IDs. This returns every permission assignment across every report folder in your org in a single import, without navigating the Setup UI folder by folder.
Step 2. Query ObjectPermissions for profile edit access
Create a second import using Custom SOQL Query. Select Parent.Profile.Name, SobjectType and PermissionsEdit from ObjectPermissions where PermissionsEdit equals true. Add a filter on SobjectType to scope to the objects you need to audit, standard objects, custom objects ending in “__c” or specific named objects. This produces the full list of profiles with edit access to each object, which is the data that manual profile-by-profile checking in Setup is trying to surface.
Step 3. Cross-reference permissions with user and profile details
Create a third import for the User object, pulling Id, Name, ProfileId and UserRoleId. Use VLOOKUP in your main permission sheet to match UserOrGroupId from the FolderShare import and Parent.Profile.Name from the ObjectPermissions import to actual user names, profile names and roles. Apply conditional formatting to colour-code access levels, Manage, Edit and View, so the permission matrix is readable at a glance for a non-technical reviewer.
Step 4. Schedule weekly refresh and use Snapshots for compliance history
Set a weekly refresh in Coefficient so your permission matrix updates automatically after each change cycle. Enable Coefficient’s Snapshots feature to capture a timestamped copy of the permission state at each refresh. Snapshots give you a historical record of how permissions changed over time, which is exactly the audit trail compliance reviews require when they ask how a given profile gained access to a sensitive folder or object.
What you get
Your full Salesforce permission matrix covers report folder access and object-level edit rights across every profile, updated weekly and historically tracked through snapshots. Compliance reviews and security audits start with a current, structured export rather than a manual folder-by-folder exercise. Permission changes between periods are visible by comparing snapshot versions.
Start auditing your Salesforce permissions automatically at coefficient.io/get-started.
