Am I doing this correctly?
I am setting up an integration to Spiff using the new Salesforce API Only System Integration user license.
I am trying to follow the principle of least privilege.
I wish to grant READ ONLY access to a limited number of fields on the Account. In order to grant access to Accounts, I must also assign the Salesforce API Integration permission set license, which grants View All, Modify All permissions to the Account object.
Have y'all seen all the permissions included in this PSL? By assigning it, ALL account fields are exposed to the Spiff application. Not to mention the plethora of other sys-admin level permissions that I don't want this application to have.
What's the solution here? Go back to standard full-price license type?
