1 of 1

Salesforce Data Inventory

The following table(s) contains detailed examples of the metadata fields available from the Salesforce API endpoints Worklytics leverages. In order to pseudonymize and sanitize PII and other potentially sensitive data, Worklytics provides access to a Data Loss Prevention (DLP) Proxy, which allows customers to pre-filter metadata, within customer infrastructure, before it is sent to Worklytics for processing.

These are the fields Worklytics recommends but the Worklytics DLP Proxy provides full field-level control and therefore any field may be removed or sanitized.

Field descriptions are taken from third party API documentation, these are maintained on a best effort basis and Worklytics can not guarantee their indefinite accuracy. Please refer to the source API site for the most up-to-date documentation.

How to read the "DLP Proxy" column in the table(s):

🔴 This field is completely redacted by the DLP Proxy

⭕ This field is transformed, usually partially redacted

🟡 This field is "pseudonymized" by the DLP Proxy: only a SHA256 hash of its value is sent to Worklytics; never the value itself

To see only the fully sanitized version of this document, click here.

Worklytics requires access to the following API primary endpoints:

Model

Description

API docs

Used to retrieve account metadata Endpoints: /services/data/v{version}/sobjects/Account/describe /services/data/v{version}/composite/Account /services/data/v{version}/query

Used to retrieve users metadata Endpoints: /services/data/v{version}/sobjects/User/describe /services/data/v{version}/composite/User /services/data/v{version}/query

Account

API docs: https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_account.htm

DLP Proxy docs: Salesforce

DLP Proxy

Property Name

Type

Description

🟢 Allowed

accountSource

String

🟢 Allowed

annualRevenue

BigDecimal

🔴 Redacted

attributes

N/A

🟡 Pseudonymized

createdById

String

The ID of the user who created this record Raw example: 4831887 Sanitized example:

🟢 Allowed

createdDate

ZonedDateTime

🟢 Allowed

deleted

boolean

🟢 Allowed

lastActivityDate

Date

🟢 Allowed

lastModifiedById

String

🟢 Allowed

lastModifiedDate

ZonedDateTime

🟢 Allowed

numberOfEmployees

Long

🟡 Pseudonymized

ownerId

String

The ID of the user who currently owns this account. Raw example: 4831887 Sanitized example:

🟢 Allowed

ownership

String

🟢 Allowed

parentId

String

🟢 Allowed

rating

String

🟢 Allowed

sic

String

🟢 Allowed

type

String

ActivityHistory

API docs: https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_activityhistory.htm

DLP Proxy docs: Salesforce

DLP Proxy

Property Name

Type

Description

🟢 Allowed

accountId

String

🟢 Allowed

activityDate

Date

🟢 Allowed

activityDateTime

ZonedDateTime

🟢 Allowed

activitySubtype

String

🟢 Allowed

activityType

String

🟢 Allowed

allDayEvent

boolean

🟢 Allowed

callDurationInSeconds

Long

🟢 Allowed

callType

String

🟢 Allowed

completedDateTime

ZonedDateTime

🟡 Pseudonymized

createdById

String

The ID of the user who created this record Raw example: 4831887 Sanitized example:

🟢 Allowed

createdDate

ZonedDateTime

🟢 Allowed

deleted

boolean

🟢 Allowed

durationInMinutes

Long

🟢 Allowed

endDateTime

ZonedDateTime

🟢 Allowed

highPriority

boolean

🟡 Pseudonymized

lastModifiedById

String

The ID of the user last updated this record Raw example: 4831887 Sanitized example:

🟢 Allowed

lastModifiedDate

ZonedDateTime

🟡 Pseudonymized

ownerId

String

The ID of the user or group who owns the activity. Raw example: 4831887 Sanitized example:

🟢 Allowed

priority

String

🟢 Allowed

startDateTime

ZonedDateTime

🟢 Allowed

status

String

🟢 Allowed

task

boolean

🟢 Allowed

whatId

String

🟡 Pseudonymized

whoId

String

Raw example: 4831887 Sanitized example:

User

API docs: https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_user.htm

DLP Proxy docs: Salesforce

DLP Proxy

Property Name

Type

Description

🟡 Pseudonymized

accountId

String

ID of the Account associated with a Customer Portal user. Raw example: 4831887 Sanitized example:

🟢 Allowed

active

boolean

🔴 Redacted

alias

String

🔴 Redacted

attributes

N/A

🟡 Pseudonymized

contactId

String

Raw example: 4831887 Sanitized example:

🟡 Pseudonymized

createdById

String

The ID of the user who created this record Raw example: 4831887 Sanitized example:

🟢 Allowed

createdDate

ZonedDateTime

🔴 Redacted

email

String

Raw example: alice@acme.com Sanitized example:

🟢 Allowed

emailEncodingKey

String

The email encoding for the user, such as ISO-8859-1 or UTF-8

🟢 Allowed

lastLoginDate

ZonedDateTime

🟡 Pseudonymized

lastModifiedById

String

The ID of the user last updated this record Raw example: 4831887 Sanitized example:

🟢 Allowed

lastModifiedDate

ZonedDateTime

🟡 Pseudonymized

managerId

String

The Id of the user who manages this user. Raw example: 4831887 Sanitized example:

🔴 Redacted

name

String

🟢 Allowed

timeZoneSidKey

String

🟢 Allowed

userRoleId

String

🟢 Allowed

userType

String

🔴 Redacted

username

String

Salesforce Data Inventory

These are the fields Worklytics recommends but the Worklytics DLP Proxy provides full field-level control and therefore any field may be removed or sanitized.

How to read the "DLP Proxy" column in the table(s):

🔴 This field is completely redacted by the DLP Proxy

⭕ This field is transformed, usually partially redacted

🟡 This field is "pseudonymized" by the DLP Proxy: only a SHA256 hash of its value is sent to Worklytics; never the value itself

To see only the fully sanitized version of this document, click here.

Worklytics requires access to the following API primary endpoints:

Model

Description

API docs

Used to retrieve account metadata Endpoints: /services/data/v{version}/sobjects/Account/describe /services/data/v{version}/composite/Account /services/data/v{version}/query

    <br><strong>Endpoints:</strong><br>
      <code>/services/data/v{version}/sobjects/ActivityHistory/describe</code><br>
      <code>/services/data/v{version}/query</code><br>
</td>
<td width="50"><a href="https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_activityhistory.htm" target="_blank">🔗↗️</a></td>

Used to retrieve users metadata Endpoints: /services/data/v{version}/sobjects/User/describe /services/data/v{version}/composite/User /services/data/v{version}/query

Account

API docs: https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_account.htm

DLP Proxy docs: Salesforce

DLP Proxy

Property Name

Type

Description

🟢 Allowed

accountSource

String

🟢 Allowed

annualRevenue

BigDecimal

🔴 Redacted

attributes

N/A

🟡 Pseudonymized

createdById

String

The ID of the user who created this record Raw example: 4831887 Sanitized example:

p~SIoJOpeSgYF7YUP

🟢 Allowed

createdDate

ZonedDateTime

🟢 Allowed

deleted

boolean

🟢 Allowed

lastActivityDate

Date

🟢 Allowed

lastModifiedById

String

🟢 Allowed

lastModifiedDate

ZonedDateTime

🟢 Allowed

numberOfEmployees

Long

🟡 Pseudonymized

ownerId

String

The ID of the user who currently owns this account. Raw example: 4831887 Sanitized example:

p~SIoJOpeSgYF7YUP

🟢 Allowed

ownership

String

🟢 Allowed

parentId

String

🟢 Allowed

rating

String

🟢 Allowed

sic

String

🟢 Allowed

type

String

ActivityHistory

API docs: https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_activityhistory.htm

DLP Proxy docs: Salesforce

DLP Proxy

Property Name

Type

Description

🟢 Allowed

accountId

String

🟢 Allowed

activityDate

Date

🟢 Allowed

activityDateTime

ZonedDateTime

🟢 Allowed

activitySubtype

String

🟢 Allowed

activityType

String

🟢 Allowed

allDayEvent

boolean

🟢 Allowed

callDurationInSeconds

Long

🟢 Allowed

callType

String

🟢 Allowed

completedDateTime

ZonedDateTime

🟡 Pseudonymized

createdById

String

The ID of the user who created this record Raw example: 4831887 Sanitized example:

p~SIoJOpeSgYF7YUP

🟢 Allowed

createdDate

ZonedDateTime

🟢 Allowed

deleted

boolean

🟢 Allowed

durationInMinutes

Long

🟢 Allowed

endDateTime

ZonedDateTime

🟢 Allowed

highPriority

boolean

🟡 Pseudonymized

lastModifiedById

String

The ID of the user last updated this record Raw example: 4831887 Sanitized example:

p~SIoJOpeSgYF7YUP

🟢 Allowed

lastModifiedDate

ZonedDateTime

🟡 Pseudonymized

ownerId

String

The ID of the user or group who owns the activity. Raw example: 4831887 Sanitized example:

p~SIoJOpeSgYF7YUP

🟢 Allowed

priority

String

🟢 Allowed

startDateTime

ZonedDateTime

🟢 Allowed

status

String

🟢 Allowed

task

boolean

🟢 Allowed

whatId

String

🟡 Pseudonymized

whoId

String

Raw example: 4831887 Sanitized example:

p~SIoJOpeSgYF7YUP

User

API docs: https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_user.htm

DLP Proxy docs: Salesforce

DLP Proxy

Property Name

Type

Description

🟡 Pseudonymized

accountId

String

ID of the Account associated with a Customer Portal user. Raw example: 4831887 Sanitized example:

p~SIoJOpeSgYF7YUP

🟢 Allowed

active

boolean

🔴 Redacted

alias

String

🔴 Redacted

attributes

N/A

🟡 Pseudonymized

contactId

String

Raw example: 4831887 Sanitized example:

p~SIoJOpeSgYF7YUP

🟡 Pseudonymized

createdById

String

The ID of the user who created this record Raw example: 4831887 Sanitized example:

p~SIoJOpeSgYF7YUP

🟢 Allowed

createdDate

ZonedDateTime

🔴 Redacted

email

String

Raw example: alice@acme.com Sanitized example:

{
	"scope":"email",
	"domain":"acme.com",
	"hash":"aT3usZghgyWmDoXRncq5qhmQJQMjY49xDJylpM4TyYI"
}

🟢 Allowed

emailEncodingKey

String

The email encoding for the user, such as ISO-8859-1 or UTF-8

🟢 Allowed

lastLoginDate

ZonedDateTime

🟡 Pseudonymized

lastModifiedById

String

The ID of the user last updated this record Raw example: 4831887 Sanitized example:

p~SIoJOpeSgYF7YUP

🟢 Allowed

lastModifiedDate

ZonedDateTime

🟡 Pseudonymized

managerId

String

The Id of the user who manages this user. Raw example: 4831887 Sanitized example:

p~SIoJOpeSgYF7YUP

🔴 Redacted

name

String

🟢 Allowed

timeZoneSidKey

String

🟢 Allowed

userRoleId

String

🟢 Allowed

userType

String

🔴 Redacted

username

String