Atomicsecurity

Class: metadata

Atomic security provides an additional layer of control by allowing you to configure security at the lifecycle state and/or assigned role level.

Learn about Atomic Security in Vault Help.

Attribute	Metadata	Description
label	Type: String Required Max length: 60	UI-friendly string in the Vault’s base language.
active	Type: Boolean	Indicates whether the component is active.
object	Type: Component Required	The Object the security applies to. For example, Object.country__v
object_lifecycle	Type: Component Required	The Objectlifecycle the security applies to. For example, Objectlifecycle.general_lifecycle__c
state	Type: Component Required	The Objectlifecyclestate of the Objectlifecycle the security applies to. For example, Objectlifecyclestate.active_state__c

Fieldsecurity

Section link for Fieldsecurity

Attribute	Metadata	Description
label	Type: String Required Max length: 60	UI-friendly string in the Vault’s base language.
active	Type: Boolean	Indicates whether the component is active.
role	Type: Component Required	The Objectlifecyclerole of the Objectlifecycle the security applies to. For example, Objectlifecyclerole.editor__v or Objectlifecyclerole.DEFAULT if specifying the default for all roles.
type	Type: Enum Required Allowed values: hide__v read__v edit__v	The type of permission to apply.
fields	Type: Component Required Multi-value	The fields to apply this permission to.

Objectcontrolsecurity

Section link for Objectcontrolsecurity

Attribute	Metadata	Description
label	Type: String Required Max length: 60	UI-friendly string in the Vault’s base language.
active	Type: Boolean	Indicates whether the component is active.
role	Type: Component Required	The Objectlifecyclerole of the Objectlifecycle the security applies to. For example, Objectlifecyclerole.editor__v or Objectlifecyclerole.DEFAULT if specifying the default for all roles.
type	Type: Enum Required Allowed values: hide__v view__v	The type of permission to apply.
object_controls	Type: Component Required Multi-value	The object control permissions to apply. Learn more about Object Control Permissions in Vault Help.

Actionsecurity

Section link for Actionsecurity

Attribute	Metadata	Description
label	Type: String Required Max length: 60	UI-friendly string in the Vault’s base language.
active	Type: Boolean	Indicates whether the component is active.
role	Type: Component Required	The Objectlifecyclerole of the Objectlifecycle the security applies to. For example, Objectlifecyclerole.editor__v or Objectlifecyclerole.DEFAULT if specifying the default for all roles.
type	Type: Enum Required Allowed values: hide__v view__v execute__v	The type of permission to apply.
object_actions	Type: Component Multi-value	The Object level action(s) to apply this permission to.
lifecycle_actions	Type: Component Multi-value	The Lifecycle level action(s) to apply this permission to.

Workflowactionsecurity

Section link for Workflowactionsecurity

Attribute	Metadata	Description
label	Type: String Required Max length: 60	UI-friendly string in the Vault’s base language.
active	Type: Boolean	Indicates whether the component is active.
role	Type: Component Required	The Objectlifecyclerole of the Objectlifecycle the security applies to. For example, Objectlifecyclerole.editor__v or Objectlifecyclerole.DEFAULT if specifying the default for all roles.
type	Type: Enum Required Allowed values: hide__v execute__v	The type of permission to apply.
workflow_actions	Type: Enum Multi-value Allowed values: addparticipants cancel emailparticipants removecontent updateworkflowduedate	The workflow action to apply.
workflow_task_actions	Type: Enum Multi-value Allowed values: cancel reassign updateduedate	The workflow task action to apply.

Relationshipsecurity

Section link for Relationshipsecurity

Attribute	Metadata	Description
label	Type: String Required Max length: 60	UI-friendly string in the Vault’s base language.
active	Type: Boolean	Indicates whether the component is active.
role	Type: Component Required	The Objectlifecyclerole of the Objectlifecycle the security applies to. For example, Objectlifecyclerole.editor__v or Objectlifecyclerole.DEFAULT if specifying the default for all roles.
type	Type: Enum Required Allowed values: read__v edit__v	The type of permission to apply.
document_fields	Type: Component Multi-value	Lists the object fields corresponding to the object-to-document inbound relationship on the specified object.
object_fields	Type: Component Multi-value	Lists the object fields corresponding to the object-to-object relationship on the specified object.

Supported Operations

Section link for Supported Operations

Operation	Support
Create
Recreate
Alter	*
Drop
Rename
Describe
Generate Recreate
Queryable

Notes:

• Alter: MDL Operation may not be supported for some multi-value attributes.