Appendix B: Security Matrix

The following table describes all the security settings required for each feature. Administrators and others who manage the application require visibility to additional objects.

The Matrix is arranged in the following columns:

Feature – A feature spans multiple objects

Object Visibility – The objects listed here are required for this feature to work and must be set properly on the users’ security profiles
API Name – The API name of the object

Minimum Object Rights – This column lists the minimum security rights for the corresponding object that must be set on the users’ security profiles

Other Security Requirements – Refer to this column for special fields which are critical for this feature to be used and to function properly

Feature	Object Visibility	API Name	Minimum Object Rights for the End User	Other Security Requirements
General Application	Veeva Messages Accounts Address Contacts Product Catalog My Setup Products	Message_vod Account Address_vod Contact Product_vod My_Setup_Products_vod	Read Read-Create-Edit Read Read-Create-Edit Read Read
Accounts Lists	Account List Account List Item	Account_List_vod Account_List_Item_vod	Read-Create-Edit-Delete Read-Create-Edit-Delete
Account Planning and Execution (requires Call Reporting Basic with Product Discussions)	Product Plans Product Strategies Product Tactics Account Plans Account Tactic	Product_Plan_vod Product_Strategy_vod Product_Tactic_vod Account_Plan_vod Account_Tactic_vod	Read Read Read Read-Create-Edit-Delete Read-Create-Edit-Delete	Must have Read access to product_plans.active_vod, product_strategy.active_vod, product_tactic.active.vod to use the Apply Product Plan button. Must have RW access to account_plan.active_vod
Account Hierarchy	Child Account	Child_Account_vod	Read-Create-Edit-Delete	Enable Visualforce page access for the following objects: Account_Hierarchy_vod Clone_Child_Account_vod Edit_Child_Account_vod New_Child_Account_vod View_Child_Account2_vod New_Child_Account_From_List_vod Do this for all profiles where Account Hierarchy will be configured. On the Account object, make sure the Primary_Parent_vod field is editable with field level security, but is set to read-only in the Page Layout.
Add New Professional Wizard	Affiliations Territory Fields	Affiliation_vod TSF_vod	Read-Create-Edit Read-Create-Edit	Need read access to Address.primary_vod, Account.territories.
Affiliations/Sphere of Influence	Affiliations	Affiliation_vod	Read-Create-Edit-Delete
Assessments	Assessments	Assessment_vod	Read-Create-Edit-Delete
Assign Territory	Zip to Terr	Zip_to_Terr_vod	Read	Need RW access to Account.Territories, Account.Territory_vod
Budget Management	Territory Budget Territory Budget Transaction	Territory_Budget_vod Territory_Budget_Transaction_vod	Read-Create-Edit-Delete Read-Create-Edit-Delete
Business Events	Business Event Business Event Target Call Objective	Business_Event_vod Business_Event_Target_vod Call_Objective_vod	Read Read Read-Edit
Calendar Functionality	Call Cycle Entries	Call_Cycle_Entry_vod	Read-Create-Edit-Delete
Call Booking	Call	Call2_vod	Read-Create-Edit-Delete	Only calls with status ‘planned’ should be visible Enable the new Visual Force Page for Call_Booking_vod to make it visible to the necessary profiles (assigners) Give access to the Apex class VOD_CALL_BOOKING to the assigners.
Call Objectives	Call Objective	Call_Objective_vod	Read-Create-Edit-Delete	Create and delete permissions are required for recurring call objectives.
Call Reporting Basic (includes product detailing)	Call Call Detail Territory Fields Account Plan	Call2_vod Call2_Detail_vod TSF_vod Account_Plan_vod	Read-Create-Edit-Delete Read-Create-Edit-Delete Read Read	Must have Read access to account.territories Must have at least one product selected in My Setup page. Must have Visibility to the following Account fields: Preferred_Names_vod__c, Suffix_vod__c, Middle_vod__c, Credentials_vod__c Must have visibility to Active_vod__c field on Account Plan
Call Reporting with Key Messages	Call Key Message Key Message	Call2_Key_Message_vod Key_Message_vod	Read-Create-Edit-Delete Read
Call Reporting with Product Discussions	Call Discussion	Call2_Discussion_vod	Read-Create-Edit-Delete
Call Reporting with Follow-up Activities	Call Followup Template	Call_Followup_Template_vod	Read
Call Reporting with Medical Events	Medical Event	Medical_Event_vod	Read
Call Reporting with Expenses	Call Expense	Call2_Expense_vod	Read-Create-Edit-Delete
Call Reporting with Promo Items/Reprints	Samples	Call2_Sample_vod	Read-Create-Edit-Delete
Call Reporting with PDMA-Compliant Sampling	Samples Sample Lots Sample Transactions	Call2_Sample_vod Sample_Lot_vod Sample_Transaction_vod	Read-Create-Edit-Delete Read-Edit Read-Create	Must have at least one Sample Lot marked Active per sample for each User Must have Read access to License fields on the Address record (License #, License Expiration Date, License Valid to Sample, Sample Status)
Call Reporting with Sample Limits	Sample Limit Sample Limit Transaction	Sample_Limit_vod Sample_Limit_Transaction_vod	Read	Provide read-write access to Sample Limits for administrators. The Sample Limit Transactions is an administrative object, and therefore end users should not be provided visibility to this object (i.e. as a Tab or Related List). Must have Field Level Security for the Call_Sample_vod.Limit_Applied_vod field as Hidden for all end users. Must have Field Level Security for the Call_Sample_vod.Apply_Limit_vod field as Read/Write for the Sample Limit process to execute.
Clinical Trials	Clinical Trials	Clinical_Trial	Read-Create-Edit-Delete
CLM	CLM Presentation CLM Presentation Slide Key Message	Clm_Presentation_vod Clm_Presentation_Slide_vod Key_Message_vod	Read Read Read
Coaching Reports	Coaching Reports	Coaching_Report_vod	Read-Create-Edit-Delete
Collaborative Relationships	Account Authorization	Account_Authorization_vod	Read	Users must have access to: CollaborativeRelationship record type on Account_Authorization_vod object Call2_vod.Supervising_Physician_vod field on the Call2_vod object Users must have visibility to: Account_Authorization_vod.Account_vod Account_Authorization_vod.Supervising_Account_vod Account_Authroization_vod.Supervising_Account_Name_vod Account_Authorization_vod.Collaborative_Relationship_State_vod Account_Authorization_vod.Collaborative_Relationship_Inactive_vod
Cycle Plans	Cycle Plan Cycle Plan Target Cycle Plan Detail	Cycle_Plan_vod Cycle_Plan_Target_vod Cycle_Plan_Detail_vod	Read Read Read	Enable Visualforce Page Access for the following Visualforce pages: View_Cycle_Plan_vod and Edit_Cycle_Plan_vod. Enable Apex Class Access for VODDatabaseApi. For Real Time cycle Plans, all objects need Read, Create, Edit, and Delete permissions.
Engage Integration User	Multichannel Content Multichannel Content Assets Multichannel Activity Multichannel Activity Line Site Content Deployment Account External Id Map	Multichannel_Content_vod Multichannel_Content_Asset_vod Multichannel_Activity_vod Multichannel_Activity_Line_vod Site_vod Content_Deployment_vod Account_External_ID_Map_vod	Read-Create-Edit Read-Create-Edit Read-Create-Edit Read-Create-Edit Read-Create-Edit Read-Create-Edit Read-Create-Edit
Engage Rep Profile	Multichannel Content Multichannel Content Assets Multichannel Activity Multichannel Activity Line Site	Multichannel_Content_vod Multichannel_Content_Asset_vod Multichannel_Activity_vod Multichannel_Activity_Line_vod Site_vod	Read Read Read Read Read
Formulary for Rep	Benefit Designs Benefit Design Lines Formulary Product Analytics Product Group Product Group Map Analytics Files Analytics Layouts Sales Transaction Account Analytics Market Analytics File Market Map My Setup	Benefit_Design_vod Benefit_Design_Line_vod Formulary_Products_vod Analytics_Product_Group_vod Product_Group_Map_vod Analytics_Files_vod Analytics_Layouts_vod Sales_Transactions_vod Account Analytics_Markets_vod Analytics_File_Market_Map_vod My_Setup_Products_vod	Read Read Read Read Read Read Read Read Read Read Read Read
Formulary Matrix	Benefit Designs Benefit Design Lines Formulary Products	Benefit_Design_vod Benefit_Design_Line_vod Formulary_Products_vod	Read-Create-Edit Read-Create-Edit Read	Need RW access to Benefit_design_type_vod, Benefit_design_line_type_vod
Material Orders	Material Orders	Material_Order	Read-Create-Edit-Delete
Medical Events	Medical Inquiry Event Attendee	Medical_Inquiry_vod Event_Attendee_vod	Read Read
Medical Inquiries	Medical Inquiry	Medical_Inquiry_vod	Read	Non-Admins should not have Edit Privileges to Medical_Inquiry_vod.Lock_vod
My Accounts	Product Metrics Territory Fields Preferences Views	Product_Metrics_vod TSF_vod Preferences_vod View_vod	Read-Create-Edit Read-Create-Edit Read-Create-Edit Read-Create-Edit-Delete	Need Read access to Address_vod.Primary_vod Territory Fields also requires Territory Management to be configured.
My Schedule	Territory Fields Call	TSF_vod Call2_vod	Read Read-Create-Edit-Delete	Need RW access to Address.longitude, Address.latitude. Need Read access to Address.Best_times_vod
Network Integration	Account Address Child Account Data Change Request Data Change Request Line DCR Field Type Network Mapping Network Object Mapping Network Field Mapping Network Reference Mapping	Account Address_vod Child_Account_vod Data_Change_Request_vod Data_Change_Request_Line_vod DCR_Field_Type_vod Network_Mapping_vod Network_Object_Mapping_vod Network_Field_Mapping_vod Network_Reference_Mapping_vod	Read Read Read Read-Create Read-Create Read Read-Edit Read Read Read	Provide Visualforce page access to the user profile for the following pages: Edit_Account_DCR_vod Edit_Address_DCR_vod Edit_Child_Account_DCR_vod New_Address_DCR_vod New_Child_Account_DCR_vod New_Parent_Account_DCR_vod
Office Hours	Addresses	Address_vod	Read-Create-Edit	Need RW access to Address.Best_times_vod
Order Management	Order Order Line Order Campaign Pricing Rule	Order_vod Order_Line_vod Order_Campaign_vod Pricing_Rule_vod	Read-Create-Edit-Delete Read-Create-Edit-Delete Read Read	Enable the Visualforce Page Access for the following Visualforce pages: Clone_Order_vod, Edit_Order_vod, New_Order_vod, and View_Order_vod. Enable Apex Class Access for VODDatabaseApi.
Package Labels	User Rep Roster Sample Transactions Call	User Rep_Roster_vod Sample_Transaction_vod Call2_vod	Read Read Read Read
Product Metrics (Ratings)	Product Metrics Metric Configurations	Product_Metrics_vod Metric_Configuration_vod	Read-Create-Edit Read	Must have at least one product selected in My Setup page.
Publications	Publications	Publication	Read-Create-Edit-Delete
Sample Inventory Management (For Primary Care Sales Representatives – the defined Object privileges should be considered Maximum Object Rights)	Sample Inventory Sample Inventory Items Sample Receipts Sample Transactions Sample Lots Lot Catalog Rep Roster	Sample_Inventory_vod Sample_Inventory_Item_vod Sample_Receipt_vod Sample_Transaction_vod Sample_Lot_vod Lot_Catalog_vod Rep_Roster_vod	Read-Create-Edit-Delete Read-Create-Edit-Delete Read-Create-Edit-Delete Read-Create Read-Edit Read Read-Create-Edit	Must have Rep Roster set up for each user No RW field level access to Sample_Inventory_vod.Audit_vod and Sample_Inventory_vod.Unlock_vod fields No RW field level access to Sample_Transaction_vod.Unlock_vod field.
Sample Inventory Management (For Samples Administrators)	Sample Inventory Sample Inventory Items Sample Receipts Sample Transactions Sample Transaction Audit Sample Lots Lot Catalog Rep Roster	Sample_Inventory_vod Sample_Inventory_Item_vod Sample_Receipt_vod Sample_Transaction_vod Sample_Transaction_Audit_vod Sample_Lot_vod Lot_Catalog_vod Rep_Roster_vod	Read-Create-Edit-Delete Read-Create-Edit-Delete Read-Create-Edit-Delete Read-Create-Edit-Delete Read Read-Create-Edit-Delete Read-Create-Edit-Delete Read-Create-Edit	Must have Rep Roster set up for each user Must have RW field level access to Sample_Inventory_vod.Audit_vod and Sample_Inventory_vod.Unlock_vod fields Must have RW field level access to Sample_Transaction_vod.Unlock_vod field.
Sample and Promotional Item Inventory Ordering (For Rep/DM)	Inventory Order Inventory Order Line Inventory Order Allocation	Inventory_Order_vod Inventory_Order_Line_vod Inventory_Order_Allocation_vod	Read-Create-Edit-Delete Read-Create-Edit-Delete Read	Grant access to Inventory Order tab or utilize the links available on the “My Samples” page Grant access to the following Visualforce pages: o Edit_Inventory_Sample_Order_vod o New_Inventory_Sample_Order_vod o View_Inventory_Sample_Order_vod o Clone_Inventory_Sample_Order_vod (optional) o Inventory_Order_Reallocate_vod (optional for Reps)
Sample and Promotional Item Inventory Ordering (For Sample Admin)	Inventory Order Inventory Order Line Inventory Order Allocation	Inventory_Order_vod Inventory_Order_Line_vod Inventory_Order_Allocation_vod	Read-Create-Edit-Delete Read-Create-Edit-Delete Read-Create-Edit-Delete	Grant access to Inventory Order tab Grant access to the following Visualforce pages: o Edit_Inventory_Sample_Order_vod o New_Inventory_Sample_Order_vod o View_Inventory_Sample_Order_vod o Clone_Inventory_Sample_Order_vod (optional) o Inventory_Order_Reallocate_vod
Sample Requests (BRCs)	Sample Order Transaction	Sample_Order_Transaction_vod	Read	Users should have access to the Sample Order Transaction tab. Users need visibility to the following fields: Ship Address Line 1 (Call Object) Ship Address Line 2 (Call Object) Ship City (Call Object) Ship Country (Call Object) Ship License # (Call Object) Ship License Status (Call Object) Ship State (Call Object) Ship To Address (Lookup) (Call Object) Ship Zip (Call Object) Distributor (Call Sample Object)
Speaker Evaluations	Speaker Evaluations	Speaker_Evaluation	Read-Create-Edit-Delete
Surveys	Survey Survey Target Survey Question Question Response	Survey_vod Survey_Target_vod Survey_Question_vod Question_Response_vod	Read Read-Edit Read Read-Create-Edit	If using open surveys, users also need create permission to Survey_Target_vod
Territory Fields	Territory Fields	TSF_vod	Read-Create-Edit	Need RW access to Account.Territories.
Territory Utilities (Territory Management)	Zip to Terr Brick to Terr Server Job Status	Zip_to_Terr_vod Brick_to_Terr_vod Server_Job_Status_vod	Read Read Read-Create-Edit-Delete	Need RW access to Account.Territories, Account.Territory_vod, and Account.Territory_test_vod. Need Administrative permissions to use Territory Management.
Time Off Territory	Time Off Territory	Time_Off_Territory_vod	Read-Create-Edit-Delete
Veeva Analytics Process (Admins)	Veeva Analytics Process	Veeva_Analytics_Process_vod	Read-Create-Edit-Delete	To enable, create a Scheduled Job (Admin Setup  Monitoring  Scheduled Jobs) for the VEEVA_RUN_ANALYTICS_PROCESS Apex Class.
VInsights Analytics End User	Analytics Product Group Product Group Map Product Event Analytics Files Analytics Layouts Sales Transaction Account Analytics Market Analytics File Market Map Zip to Terr Brick to Terr Brick Hierarchy Data Map Template Data Map Template Field	Analytics_Product_Group_vod Product_Group_Map_vod Product_Event_vod Analytics_Files_vod Analytics_Layouts_vod Sales_Transactions_vod Account Analytics_Markets_vod Analytics_File_Market_Map_vod Zip_to_Terr_vod Brick_to_Terr_vod Brick_Heirarchy_vod Data_Map_Template_vod Data_Map_Template_Field_vod	Read Read Read Read Read Read Read Read Read Read Read Read Read Read	Must have visibility to the ID_vod__c, ID2_vod__c, PDRP, and PDRP Opt Out fields on Account. Visibility to Brick related objects is required only if Brick based alignments are used. Visibility to Data Map Template and Data Map Template Field is required only if loading zip level data and/or utilizing the Analytics Data Channel report on Account Summary
VInsights Analytics Admin	Analytics Product Group Product Group Map Product Event Analytics Files Analytics Layouts Data Map Template Date Map Template Fields Sales Transaction Account Analytics Market Analytics File Market Map Zip to Terr Brick to Terr Brick Hierarchy	Analytics_Product_Group_vod Product_Group_Map_vod Product_Event_vod Analytics_Files_vod Analytics_Layouts_vod Data_Map_Template_vod Data_Map_Template_Field_vod Sales_Transaction_vod Account Analytics_Markets_vod Analytics_File_Market_Map_vod Zip_to_Terr_vod Brick_to_Terr_vod Brick_Heirarchy_vod	Read-Create-Edit-Delete Read-Create-Edit-Delete Read-Create-Edit-Delete Read-Create-Edit-Delete Read-Create-Edit-Delete Read-Create-Edit-Delete Read-Create-Edit-Delete Read Read-Create-Edit-Delete Read-Create-Edit-Delete Read Read Read Read	Must have visibility to the ID_vod__c, ID2_vod__c, PDRP, and PDRP Opt Out fields on Account. Visibility to Brick related objects is required only if Brick based alignments are used.