Skip to main content
Amber Gillis (K2M) a posé une question dans #Security
Our SOX auditors said we can't have anyone in production with development access.  Is this required to deploy change sets?  Does anyone have this situation and what to do you do to stay SOX compliant, but still be able to successfully manage your system and deployments?
1 réponse
  1. 18 févr. 2018, 16:27
    "Development access" is not really a thing. So, you will need to get more information about what the restriction is/ A user cannot deploy Change Sets if they don't have pretty extensive permissions.   And, most configuration damage in orgs is done by non-coding changes (field definitions, validation rules, WFRs, Process Builders, etc).

     

    You can grant 'Deploy Change Set' to a user, so they can deploy any Inbound Change Sets that someone else has created. There is no need to also grant "Author Apex".
0/9000