Architect Trailblazers

💬 We asked, you answered! Data 360 integrations is the topic you chose for our next True to the Core Deep Dive. 

Join us November 10 for an extended live Q&A with Salesforce Product Managers @Varun Dewan and @Praveen Gonugunta. Bring your questions about Data 360 integrations and get answers directly from the product experts. 

Here's what to expect: 

✨ The latest in connectors and unstructured data processing 

💡 Insights on zero copy architecture 

💬 An extended live Q&A with the product team 

📅 November 10 | 9–10 a.m. PT 

➡️ RSVP at the link here. ⬅️ #True To The Core @IdeaExchange #AwesomeAdmins

@Salesforce Admins Live Sessions, @* Release Readiness Trailblazers *, @* Salesforce Platform *, @* Trailhead Official *, @Trailblazer Community Cove, @Admin Addicts,  @Dreamforce for Admins, @Architect Trailblazers @* Salesforce Developers *

Ran into this during a security review for a client and wanted to share it with the architect community, since it's the kind of thing that quietly fails least-privilege audits.
The ask was simple: a service account needs to run a read-only Tooling API query against InstalledSubscriberPackage, just to report which managed packages/versions are installed. No install, no uninstall, just read.
Turns out the only permission that grants access to that object is "Download AppExchange Packages" — which also grants install and uninstall rights for AppExchange packages org-wide. There's no granular read-only alternative. Confirmed this directly with Salesforce Support (Case 474178877): that permission is currently the only path to query InstalledSubscriberPackage.
For anyone doing security reviews on integration users, this is worth knowing: if you see "Download AppExchange Packages" assigned to a service account, don't assume it's just for reporting — it's also an install/uninstall grant. Best mitigation right now:
- Assign via a dedicated Permission Set scoped to only that service account, never on a profile
- Base the account on Minimum Access - API Only Integrations
- Document it as a known least-privilege exception, since it isn't a true fix
Filed an idea to get a proper read-only permission added:
https://ideas.salesforce.com/s/idea/a0BHp000017JmFfMAK/granular-readonly-permission-to-query-installedsubscriberpackage
If you've hit this same wall on a client integration or audit, an upvote helps get it prioritized. Curious if others have found a cleaner workaround than permission-set scoping.

In a record-triggered flow on a custom object, can I use the Custom Error element to stop a record from saving and show an error message to the user, similar to a validation rule?

My scenario: on the Loan object, when a checkbox field changes from false to true, I want the flow to check whether at least one related child record exists (the child has a lookup field to the Loan). If no child record exists, the save should be blocked with an error message.

Please confirm:

1. Is the Custom Error element available in both before-save (Fast Field Updates) and after-save (Actions and Related Records) record-triggered flows?
2. Which type is recommended when the flow needs a Get Records element to look up related child records?
3. Does a Custom Error roll back the entire save, including any other changes the user made to the record?
4. Can the error be shown on a specific field, or only at the top of the page?
5. Are there any limitations when the record is saved from a custom Lightning component rather than a standard record page?

Cue the confetti, Trailblazers! Together, you’ve officially earned 1.5 million Salesforce certifications across the ecosystem! 🎉

Congratulations to each and every one of you on investing in yourselves to achieve such an incredible milestone! 🥳 We’re honored you chose to learn, earn, and grow with us.

Ready for what’s next? Explore certifications today: https://sfdc.co/salesforce-certifications 

@* Trailhead Official * @* Trailhead Academy * @Salesforce Certified Professionals @Trailblazer Community Cove @* Salesforce Administrators * @* Salesforce Developers * @Architect Trailblazers @Salesforce Business Analysts @Consultant Trailblazers #Salesforce #Certifications #Trailhead #TrailblazerCommunity #Agentforce #Salesforce Admin #Salesforce Developer

Shukran to everyone who showed up live today! 

What a session! If you were in the room for Salesforce Well-Architected - Session 3 (Built to Bend, Not Break), you already know the best parts—the unscripted technical roasting, live Q&A, and community banter—didn't make it into the recording. You really had to be there! 😉 

For everyone who missed out on the live energy, don't make it a habit! You can still catch up on the architectural blueprints here:

📹 Part 1: https://youtu.be/jbOMRhdPMIY

📹 Part 2: https://youtu.be/KX4j5K8y3IY

Moral of the story:

 Recordings give you the replay, but the live session is where the magic (and chaos) happens!  

See you next week for Part 4 of the Salesforce Well-Architected series! 🚀

@Salesforce Developer Group, Dubai, UAE @Architect Trailblazers @* Salesforce Developers *

Habibi, engineered for 100-year storms & summer heat!

🏙️⚡ 

Tomorrow is Salesforce Well Architected - Session 3: Built to Bend, Not Break!

Just like Dubai’s iconic skyscrapers, your org needs to sway with the wind without collapsing under heavy load. Come grab your coffee, join the community, and learn how to build systems with zero breaking points! 

🔗 Lock in your spot here: https://trailblazercommunitygroups.com/j/rsnter9h3mhnb/

Ready to explore a new way to build apps and agents? 

Join us October 20 for True to the Core Deep Dive: Builder Central. Salesforce Product Managers @Tiaan Kruger and @Daivat Dholakia will give us a closer look at how admins can use natural language to turn business needs into solutions while staying in control. 

Here’s what to expect: 

✨ A look at Builder Central in action 

💡 Insights from the product team 

💬 An extended live Q&A to get your questions answered 

📅 October 20 | 9–10 a.m. PT 

➡️ RSVP at the link here. ⬅️ 

#True To The Core @IdeaExchange #AwesomeAdmins

@Salesforce Admins Live Sessions, @* Release Readiness Trailblazers *, @* Salesforce Platform *, @* Trailhead Official *, @Trailblazer Community Cove, @Admin Addicts,  @Dreamforce for Admins, @Architect Trailblazers