Are Your Salesforce Permissions Protecting You - or Exposing You?

Cyera Research Labs examined Salesforce environments and found widespread overreliance on profiles (over 80% of access; 25% of users profile-only) and excessive assignment of high-privilege permissions (e.g., View/Modify All Data), with some organizations granting admin-level access to around 30% of users—indicators of governance and least-privilege breakdowns. The report urges a shift to lean baseline profiles augmented by permission sets and permission set groups, with tight limitation, monitoring, and periodic review of elevated permissions to reduce overexposure, compliance risk, and operational fragility.