Appendix B: Security Matrix

The following table describes all the security settings required for each feature. Administrators and others who manage the application require visibility to additional objects.

The Matrix is arranged in the following columns:

  • Feature – A feature spans multiple objects
  • Object Visibility – The objects listed here are required for this feature to work and must be set properly on the users’ security profiles
  • API Name – The API name of the object
  • Minimum Object Rights – This column lists the minimum security rights for the corresponding object that must be set on the users’ security profiles
  • Other Security Requirements – Refer to this column for special fields which are critical for this feature to be used and to function properly

Feature

Object Visibility

API Name

Minimum Object Rights for the End User

Other Security Requirements

General Application

Veeva Messages

Accounts

Address

Contacts

Product Catalog

My Setup Products

Message_vod

Account

Address_vod

Contact

Product_vod

My_Setup_Products_vod

Read

Read-Create-Edit

Read

Read-Create-Edit

Read

Read

 

Accounts Lists

Account List

Account List Item

Account_List_vod

Account_List_Item_vod

Read-Create-Edit-Delete

Read-Create-Edit-Delete

 

Account Planning and Execution (requires Call Reporting Basic with Product Discussions)

Product Plans

Product Strategies

Product Tactics

Account Plans

Account Tactic

Product_Plan_vod

Product_Strategy_vod

Product_Tactic_vod

Account_Plan_vod

Account_Tactic_vod

Read

Read

Read

Read-Create-Edit-Delete

Read-Create-Edit-Delete

Must have Read access to product_plans.active_vod, product_strategy.active_vod, product_tactic.active.vod to use the Apply Product Plan button.

 

Must have RW access to account_plan.active_vod 

Account Hierarchy

Child Account

Child_Account_vod

Read-Create-Edit-Delete

Enable Visualforce page access for the following objects: 

  • Account_Hierarchy_vod
  • Clone_Child_Account_vod
  • Edit_Child_Account_vod
  • New_Child_Account_vod
  • View_Child_Account2_vod
  • New_Child_Account_From_List_vod

Do this for all profiles where Account Hierarchy will be configured.

On the Account object, make sure the Primary_Parent_vod field is editable with field level security, but is set to read-only in the Page Layout.

Add New Professional Wizard

Affiliations

Territory Fields

Affiliation_vod

TSF_vod

Read-Create-Edit

Read-Create-Edit

Need read access to Address.primary_vod, Account.territories. 

Affiliations/Sphere of Influence

Affiliations

Affiliation_vod

Read-Create-Edit-Delete

 

Assessments

Assessments

Assessment_vod

Read-Create-Edit-Delete

 

Assign Territory

Zip to Terr

Zip_to_Terr_vod

Read

Need RW access to Account.Territories, Account.Territory_vod

Budget Management

Territory Budget

Territory Budget Transaction

Territory_Budget_vod

Territory_Budget_Transaction_vod

Read-Create-Edit-Delete

Read-Create-Edit-Delete

 

Business Events

 

Business Event

Business Event Target

Call Objective

 

Business_Event_vod

Business_Event_Target_vod

Call_Objective_vod

Read

Read

Read-Edit

 

Calendar Functionality

Call Cycle Entries

Call_Cycle_Entry_vod

Read-Create-Edit-Delete

 

Call Booking

Call

Call2_vod

Read-Create-Edit-Delete

Only calls with status ‘planned’ should be visible

Enable the new Visual Force Page for Call_Booking_vod to make it visible to the necessary profiles (assigners)

Give access to the Apex class VOD_CALL_BOOKING to the assigners.

Call Objectives Call Objective

Call_Objective_vod

Read-Create-Edit-Delete Create and delete permissions are required for recurring call objectives.

Call Reporting Basic (includes product detailing)

Call


Call Detail


Territory Fields

 

Account Plan

Call2_vod

 

Call2_Detail_vod

 

TSF_vod

 

Account_Plan_vod

Read-Create-Edit-Delete

Read-Create-Edit-Delete

Read

Read

Must have Read access to account.territories

Must have at least one product selected in My Setup page.

Must have Visibility to the following Account fields: Preferred_Names_vod__c, Suffix_vod__c, Middle_vod__c, Credentials_vod__c

Must have visibility to Active_vod__c field on Account Plan

Call Reporting with Key Messages

Call Key Message

Key Message

Call2_Key_Message_vod

Key_Message_vod

Read-Create-Edit-Delete

Read

 

Call Reporting with Product Discussions

Call Discussion

Call2_Discussion_vod

Read-Create-Edit-Delete

 

Call Reporting with Follow-up Activities

Call Followup Template

Call_Followup_Template_vod

Read

 

Call Reporting with Medical Events

Medical Event

Medical_Event_vod

Read

 

Call Reporting with Expenses

Call Expense

Call2_Expense_vod

Read-Create-Edit-Delete

 

Call Reporting with Promo Items/Reprints

Samples

 

Call2_Sample_vod

Read-Create-Edit-Delete

 

Call Reporting with PDMA-Compliant Sampling

Samples

Sample Lots

Sample Transactions

Call2_Sample_vod

Sample_Lot_vod

Sample_Transaction_vod

Read-Create-Edit-Delete

Read-Edit

Read-Create

Must have at least one Sample Lot marked Active per sample for each User

Must have Read access to License fields on the Address record (License #, License Expiration Date, License Valid to Sample, Sample Status)

Call Reporting with Sample Limits

Sample Limit

Sample Limit Transaction

Sample_Limit_vod

Sample_Limit_Transaction_vod

Read

Provide read-write access to Sample Limits for administrators.

The Sample Limit Transactions is an administrative object, and therefore end users should not be provided visibility to this object (i.e. as a Tab or Related List).

Must have Field Level Security for the Call_Sample_vod.Limit_Applied_vod field as Hidden for all end users.

Must have Field Level Security for the Call_Sample_vod.Apply_Limit_vod field as Read/Write for the Sample Limit process to execute.

Clinical Trials

Clinical Trials

Clinical_Trial

Read-Create-Edit-Delete

 

CLM

 

CLM Presentation

CLM Presentation Slide

Key Message

 

Clm_Presentation_vod

Clm_Presentation_Slide_vod

Key_Message_vod

Read

Read

Read

 

Coaching Reports

Coaching Reports

Coaching_Report_vod

Read-Create-Edit-Delete

 

Collaborative Relationships

Account Authorization

Account_Authorization_vod

Read

Users must have access to:

  • CollaborativeRelationship record type on Account_Authorization_vod object
  • Call2_vod.Supervising_Physician_vod field on the Call2_vod object

Users must have visibility to:

  • Account_Authorization_vod.Account_vod
  • Account_Authorization_vod.Supervising_Account_vod
  • Account_Authroization_vod.Supervising_Account_Name_vod
  • Account_Authorization_vod.Collaborative_Relationship_State_vod
  • Account_Authorization_vod.Collaborative_Relationship_Inactive_vod

Cycle Plans

Cycle Plan

Cycle Plan Target

Cycle Plan Detail

Cycle_Plan_vod

Cycle_Plan_Target_vod

Cycle_Plan_Detail_vod

Read

Read

Read

Enable Visualforce Page Access for the following Visualforce pages: View_Cycle_Plan_vod and Edit_Cycle_Plan_vod.

Enable Apex Class Access for VODDatabaseApi.

For Real Time cycle Plans, all objects need Read, Create, Edit, and Delete permissions.

Engage Integration User

 

Multichannel Content

Multichannel Content Assets

Multichannel Activity

Multichannel Activity Line

Site

Content Deployment

Account External Id Map

 

Multichannel_Content_vod

Multichannel_Content_Asset_vod

Multichannel_Activity_vod

Multichannel_Activity_Line_vod

Site_vod

Content_Deployment_vod

Account_External_ID_Map_vod

Read-Create-Edit

Read-Create-Edit

Read-Create-Edit

Read-Create-Edit

Read-Create-Edit

Read-Create-Edit

Read-Create-Edit

 
Engage Rep Profile

 

Multichannel Content

Multichannel Content Assets

Multichannel Activity

Multichannel Activity Line

Site

 

Multichannel_Content_vod

Multichannel_Content_Asset_vod

Multichannel_Activity_vod

Multichannel_Activity_Line_vod

Site_vod

Read

Read

Read

Read

Read

 

Formulary for Rep

Benefit Designs

Benefit Design Lines

Formulary Product

Analytics Product Group

Product Group Map

Analytics Files

Analytics Layouts

Sales Transaction

Account

Analytics Market

Analytics File Market Map

My Setup

Benefit_Design_vod

Benefit_Design_Line_vod

Formulary_Products_vod

Analytics_Product_Group_vod

Product_Group_Map_vod

Analytics_Files_vod

Analytics_Layouts_vod

Sales_Transactions_vod

Account

Analytics_Markets_vod

Analytics_File_Market_Map_vod

My_Setup_Products_vod

Read

Read

Read

Read

Read

Read

Read

Read

Read

Read

Read

Read

 

Formulary Matrix

Benefit Designs

Benefit Design Lines

Formulary Products

Benefit_Design_vod

Benefit_Design_Line_vod

Formulary_Products_vod

Read-Create-Edit

Read-Create-Edit

Read

Need RW access to Benefit_design_type_vod,

Benefit_design_line_type_vod

Material Orders

Material Orders

Material_Order

Read-Create-Edit-Delete

 

Medical Events

Medical Inquiry

Event Attendee

Medical_Inquiry_vod

Event_Attendee_vod

Read

Read

 

Medical Inquiries

Medical Inquiry

Medical_Inquiry_vod

Read

Non-Admins should not have Edit Privileges to Medical_Inquiry_vod.Lock_vod

My Accounts

Product Metrics

Territory Fields

Preferences

Views

Product_Metrics_vod

TSF_vod

Preferences_vod

View_vod

Read-Create-Edit

Read-Create-Edit

Read-Create-Edit

Read-Create-Edit-Delete

Territory Fields also requires Territory Management to be configured.

 

My Schedule

Territory Fields

Call

TSF_vod

Call2_vod

Read

Read-Create-Edit-Delete

Need RW access to Address.longitude, Address.latitude.

Need Read access to Address.Best_times_vod

Network Integration

 

Account

Address

Child Account

Data Change Request

Data Change Request Line

DCR Field Type

Network Mapping

Network Object

Mapping Network Field Mapping

Network Reference Mapping

 

Account

Address_vod

Child_Account_vod

Data_Change_Request_vod

Data_Change_Request_Line_vod

DCR_Field_Type_vod

Network_Mapping_vod

Network_Object_Mapping_vod

Network_Field_Mapping_vod

Network_Reference_Mapping_vod

Read

Read

Read

Read-Create

Read-Create

Read

Read-Edit

Read

Read

Read

Provide VisualForce page access to the user profile for the following pages:

  • Edit_Account_DCR_vod
  • Edit_Address_DCR_vod
  • Edit_Child_Account_DCR_vod
  • New_Address_DCR_vod
  • New_Child_Account_DCR_vod
  • New_Parent_Account_DCR_vod

Office Hours

Addresses

Address_vod

Read-Create-Edit

Need RW access to Address.Best_times_vod

Order Management

Order

Order Line

Order Campaign

Pricing Rule

Order_vod

Order_Line_vod

Order_Campaign_vod

Pricing_Rule_vod

Read-Create-Edit-Delete

Read-Create-Edit-Delete

Read

Read

Enable the Visualforce Page Access for the following Visualforce pages: Clone_Order_vod, Edit_Order_vod, New_Order_vod, and View_Order_vod.

Enable Apex Class Access for VODDatabaseApi.

Package Labels

User

Rep Roster

Sample Transactions

Call

User

Rep_Roster_vod

Sample_Transaction_vod

Call2_vod

Read

Read

Read

Read

 

Product Metrics (Ratings)

Product Metrics

Metric Configurations

Product_Metrics_vod

Metric_Configuration_vod

Read-Create-Edit

Read

Must have at least one product selected in My Setup page.

Publications

Publications

Publication

Read-Create-Edit-Delete

 

Sample Inventory Management

 

(For Primary Care Sales Representatives – the defined Object privileges should be considered Maximum Object Rights)

Sample Inventory

Sample Inventory Items

Sample Receipts

Sample Transactions

Sample Lots

Lot Catalog

Rep Roster

Sample_Inventory_vod

Sample_Inventory_Item_vod

Sample_Receipt_vod

Sample_Transaction_vod

Sample_Lot_vod

Lot_Catalog_vod

Rep_Roster_vod

Read-Create-Edit-Delete

Read-Create-Edit-Delete

Read-Create-Edit-Delete

Read-Create

Read-Edit

Read

Read-Create-Edit

Must have Rep Roster set up for each user

 

No RW field level access to Sample_Inventory_vod.Audit_vod and Sample_Inventory_vod.Unlock_vod fields

 

No RW field level access to Sample_Transaction_vod.Unlock_vod field.

Sample Inventory Management

 

(For Samples Administrators)

Sample Inventory

Sample Inventory Items

Sample Receipts

Sample Transactions

Sample Transaction Audit

Sample Lots

Lot Catalog

Rep Roster

Sample_Inventory_vod

Sample_Inventory_Item_vod

Sample_Receipt_vod

Sample_Transaction_vod

Sample_Transaction_Audit_vod

Sample_Lot_vod

Lot_Catalog_vod

Rep_Roster_vod

Read-Create-Edit-Delete

Read-Create-Edit-Delete

Read-Create-Edit-Delete

Read-Create-Edit-Delete

Read

Read-Create-Edit-Delete

Read-Create-Edit-Delete

Read-Create-Edit

Must have Rep Roster set up for each user

 

Must have RW field level access to Sample_Inventory_vod.Audit_vod and Sample_Inventory_vod.Unlock_vod fields

 

Must have RW field level access to Sample_Transaction_vod.Unlock_vod field.

Sample and Promotional Item Inventory Ordering

 

(For Rep/DM)

Inventory Order

Inventory Order Line

Inventory Order Allocation

Inventory_Order_vod

Inventory_Order_Line_vod

Inventory_Order_Allocation_vod

Read-Create-Edit-Delete

Read-Create-Edit-Delete

Read

Grant access to Inventory Order tab or utilize the links available on the “My Samples” page

 

Grant access to the following VisualForce pages:

o Edit_Inventory_Sample_Order_vod

o New_Inventory_Sample_Order_vod

o View_Inventory_Sample_Order_vod

o Clone_Inventory_Sample_Order_vod (optional)

o Inventory_Order_Reallocate_vod (optional for Reps)

Sample and Promotional Item Inventory Ordering

 

(For Sample Admin)

Inventory Order

Inventory Order Line

Inventory Order Allocation

Inventory_Order_vod

Inventory_Order_Line_vod

Inventory_Order_Allocation_vod

Read-Create-Edit-Delete

Read-Create-Edit-Delete

Read-Create-Edit-Delete

 

Grant access to Inventory Order tab

Grant access to the following VisualForce pages:

o Edit_Inventory_Sample_Order_vod

o New_Inventory_Sample_Order_vod

o View_Inventory_Sample_Order_vod

o Clone_Inventory_Sample_Order_vod (optional)

o Inventory_Order_Reallocate_vod

Sample Requests (BRCs)

Sample Order Transaction

Sample_Order_Transaction_vod

Read

  • Users should have access to the Sample Order Transaction tab.
  • Users need visibility to the following fields:
  • Ship Address Line 1 (Call Object)
  • Ship Address Line 2 (Call Object)
  • Ship City (Call Object)
  • Ship Country (Call Object)
  • Ship License #  (Call Object)
  • Ship License Status (Call Object)
  • Ship State (Call Object)
  • Ship To Address (Lookup) (Call Object)
  • Ship Zip (Call Object)
  • Distributor (Call Sample Object)

Speaker Evaluations

Speaker Evaluations

Speaker_Evaluation

Read-Create-Edit-Delete

 

Surveys

 

Survey

Survey Target

Survey Question

Question Response

 

Survey_vod

Survey_Target_vod

Survey_Question_vod

Question_Response_vod

Read

Read-Edit

Read

Read-Create-Edit

If using open surveys, users also need create permission to Survey_Target_vod

Territory Fields

Territory Fields

TSF_vod

Read-Create-Edit

Need RW access to Account.Territories. 

Territory Utilities (Territory Management)

Zip to Terr

Brick to Terr

Server Job Status

Zip_to_Terr_vod

Brick_to_Terr_vod

Server_Job_Status_vod

Read

Read

Read-Create-Edit-Delete

Need RW access to Account.Territories, Account.Territory_vod, and Account.Territory_test_vod.  Need Administrative permissions to use Territory Management.

Time Off Territory

Time Off Territory

Time_Off_Territory_vod

Read-Create-Edit-Delete

 

Veeva Analytics Process

(Admins)

Veeva Analytics Process

Veeva_Analytics_Process_vod

Read-Create-Edit-Delete

To enable, create a Scheduled Job (Admin Setup  Monitoring  Scheduled Jobs) for the VEEVA_RUN_ANALYTICS_PROCESS Apex Class.

VInsights Analytics End User

Analytics Product Group

Product Group Map

Product Event

Analytics Files

Analytics Layouts

Sales Transaction

Account

Analytics Market

Analytics File Market Map

Zip to Terr

Brick to Terr

Brick Hierarchy

Data Map Template

Data Map Template Field

Analytics_Product_Group_vod

Product_Group_Map_vod

Product_Event_vod

Analytics_Files_vod

Analytics_Layouts_vod

Sales_Transactions_vod

Account

Analytics_Markets_vod

Analytics_File_Market_Map_vod

Zip_to_Terr_vod

Brick_to_Terr_vod

Brick_Heirarchy_vod

Data_Map_Template_vod

Data_Map_Template_Field_vod

Read

Read

Read

Read

Read

Read

Read

Read

Read

Read

Read

Read

Read

Read

Must have visibility to the ID_vod__c, ID2_vod__c, PDRP, and PDRP Opt Out fields on Account.

Visibility to Brick related objects is required only if Brick based alignments are used.

Visibility to Data Map Template and Data Map Template Field is required only if loading zip level data and/or utilizing the Analytics Data Channel report on Account Summary

VInsights Analytics Admin

Analytics Product Group

Product Group Map

Product Event

Analytics Files

Analytics Layouts

Data Map Template

Date Map Template Fields

Sales Transaction

Account

Analytics Market

Analytics File Market Map

Zip to Terr

Brick to Terr

Brick Hierarchy

Analytics_Product_Group_vod

Product_Group_Map_vod

Product_Event_vod

Analytics_Files_vod

Analytics_Layouts_vod

Data_Map_Template_vod

Data_Map_Template_Field_vod

Sales_Transaction_vod

Account

Analytics_Markets_vod

Analytics_File_Market_Map_vod

Zip_to_Terr_vod

Brick_to_Terr_vod

Brick_Heirarchy_vod

Read-Create-Edit-Delete

Read-Create-Edit-Delete

Read-Create-Edit-Delete

Read-Create-Edit-Delete

Read-Create-Edit-Delete

Read-Create-Edit-Delete

Read-Create-Edit-Delete

Read

Read-Create-Edit-Delete

Read-Create-Edit-Delete

Read

Read

Read

Read

Must have visibility to the ID_vod__c, ID2_vod__c, PDRP, and PDRP Opt Out fields on Account.

Visibility to Brick related objects is required only if Brick based alignments are used.