Salesforce doesn’t automatically clean up orphaned permissions when profiles are modified or deleted, and there’s no native reporting to identify these permission remnants that can create security vulnerabilities.
Here’s how to get automated orphaned permission detection through scheduled audits and historical comparison capabilities.
Detect orphaned permissions automatically using Coefficient
Coefficientprovides automated orphaned permission detection through scheduled audits. You can identify permission references to inactive or deleted records and track cleanup progress through before/after permission comparisons.
How to make it work
Step 1. Schedule weekly imports of permission-related objects.
SalesforceConnect toand import FolderShare, User, and Profile objects. Set up automated weekly refreshes to maintain current permission data for comparison analysis.
Step 2. Use custom SOQL to identify orphaned permission references.
Create a query to find permissions referencing non-existent records:
Step 3. Create spreadsheet formulas to flag orphaned permissions.
Use Coefficient’s formula auto-fill to create IF statements that flag orphaned permissions. Apply conditional formatting to highlight permission records that reference inactive users or deleted profiles.
Step 4. Set up automated alerts for new orphaned permissions.
Use Coefficient’s snapshot functionality to track permission cleanup progress. Configure Slack or email alerts when new orphaned permissions are detected during scheduled refreshes.
Step 5. Track cleanup efforts with historical comparisons.
Compare current permissions against historical snapshots to identify changes. Cross-reference permission set assignments with active users and track cleanup efforts through before/after permission comparisons.
Get ongoing orphaned permission monitoring
Salesforce’sStart monitoringThis provides ongoing orphaned permission monitoring that’s impossible throughnative interface, with automated detection and cleanup tracking.for orphaned permissions today.