Salesforce Schema
graph LR
SalesforceGroup -- MEMBER_OF --> SalesforceGroup
SalesforceOrganization -- RESOURCE --> SalesforceConnectedApp
SalesforceOrganization -- RESOURCE --> SalesforceGroup
SalesforceOrganization -- RESOURCE --> SalesforcePermissionSet
SalesforceOrganization -- RESOURCE --> SalesforceProfile
SalesforceOrganization -- RESOURCE --> SalesforceUser
SalesforceOrganization -- RESOURCE --> SalesforceUserRole
SalesforceUser -- AUTHORIZED --> SalesforceConnectedApp
SalesforceUser -- HAS_ROLE --> SalesforcePermissionSet
SalesforceUser -- HAS_ROLE --> SalesforceProfile
SalesforceUser -- MEMBER_OF --> SalesforceGroup
SalesforceUser -- MEMBER_OF --> SalesforceUserRole
SalesforceUserRole -- MEMBER_OF --> SalesforceUserRoleSalesforceConnectedApp
A third-party connected application integrated with Salesforce.
Ontology Mapping: This node uses the ontology label
ThirdPartyApp.
Properties
Ontology-generated fields are shown in italics.
| Field | Index | Description |
|---|---|---|
| id | Yes | Salesforce connected app ID. |
| firstseen | Timestamp when a sync job first created this node. | |
| lastupdated | Yes | Timestamp of the last sync that observed this node. |
| admin_approved_users_only | Whether only administrator-approved users may use the app. | |
| created_date | Connected app creation timestamp. | |
| last_modified_date | Connected app last modification timestamp. | |
| name | Yes | Connected app name. |
| _ont_client_id | Yes | Normalized field sourced from id. |
| _ont_name | Yes | Normalized field sourced from name. |
| _ont_protocol | Yes | Property generated by the ontology mapping. |
| _ont_source | Module that populated this node's ontology fields. |
Relationships
(:SalesforceOrganization)-[:RESOURCE]->(:SalesforceConnectedApp): A Salesforce organization contains a connected app.(:SalesforceUser)-[:AUTHORIZED]->(:SalesforceConnectedApp): A Salesforce user authorized a connected app through an OAuth token.(:User)-[:AUTHORIZED]->(:ThirdPartyApp): generated by analysis jobOntology - User AUTHORIZED ThirdPartyApp linking.Properties:
Field Description scopes Property generated by analysis job: Ontology - User AUTHORIZED ThirdPartyApp linking.
SalesforceGroup
A Salesforce public group, queue, or role group.
Ontology Mapping: This node uses the ontology label
UserGroup.
Properties
Ontology-generated fields are shown in italics.
| Field | Index | Description |
|---|---|---|
| id | Yes | Salesforce group ID. |
| firstseen | Timestamp when a sync job first created this node. | |
| lastupdated | Yes | Timestamp of the last sync that observed this node. |
| developer_name | Yes | Group API developer name. |
| name | Group name. | |
| related_id | ID of the record associated with the group. | |
| type | Salesforce group type. | |
| _ont_name | Yes | Normalized field sourced from name. |
| _ont_source | Module that populated this node's ontology fields. |
Relationships
(:SalesforceGroup)-[:MEMBER_OF]->(:SalesforceGroup): A Salesforce group is a nested member of another group.(:SalesforceOrganization)-[:RESOURCE]->(:SalesforceGroup): A Salesforce organization contains a group.(:SalesforceUser)-[:MEMBER_OF]->(:SalesforceGroup): A Salesforce user is a member of a group.
SalesforceOrganization
A Salesforce organization with the Tenant label.
Ontology Mapping: This node uses the ontology label
Tenant.
Properties
Ontology-generated fields are shown in italics.
| Field | Index | Description |
|---|---|---|
| id | Yes | Salesforce organization ID. |
| firstseen | Timestamp when a sync job first created this node. | |
| lastupdated | Yes | Timestamp of the last sync that observed this node. |
| country | Organization country. | |
| created_date | Organization creation timestamp. | |
| instance_name | Salesforce instance name. | |
| is_sandbox | Whether the organization is a sandbox. | |
| language_locale_key | Default language locale. | |
| name | Organization name. | |
| namespace_prefix | Managed package namespace prefix. | |
| organization_type | Salesforce organization edition. | |
| primary_contact | Primary contact name. | |
| trial_expiration_date | Trial expiration date. | |
| _ont_name | Yes | Normalized field sourced from name. |
| _ont_source | Module that populated this node's ontology fields. |
Relationships
(:SalesforceOrganization)-[:RESOURCE]->(:SalesforceConnectedApp): A Salesforce organization contains a connected app.(:SalesforceOrganization)-[:RESOURCE]->(:SalesforceGroup): A Salesforce organization contains a group.(:SalesforceOrganization)-[:RESOURCE]->(:SalesforcePermissionSet): A Salesforce organization contains a permission set.(:SalesforceOrganization)-[:RESOURCE]->(:SalesforceProfile): A Salesforce organization contains a profile.(:SalesforceOrganization)-[:RESOURCE]->(:SalesforceUser): A Salesforce organization contains a user.(:SalesforceOrganization)-[:RESOURCE]->(:SalesforceUserRole): A Salesforce organization contains a user role.
SalesforcePermissionSet
A Salesforce permission set with the PermissionRole label.
Ontology Mapping: This node uses the ontology label
PermissionRole.
Properties
Ontology-generated fields are shown in italics.
| Field | Index | Description |
|---|---|---|
| id | Yes | Salesforce permission set ID. |
| firstseen | Timestamp when a sync job first created this node. | |
| lastupdated | Yes | Timestamp of the last sync that observed this node. |
| created_date | Permission set creation timestamp. | |
| description | Permission set description. | |
| is_owned_by_profile | Whether the permission set is owned by a profile. | |
| label | Permission set display label. | |
| name | Yes | Permission set API name. |
| namespace_prefix | Managed package namespace prefix. | |
| permissions_api_enabled | Whether the permission set grants API access. | |
| permissions_modify_all_data | Whether the permission set grants Modify All Data. | |
| permissions_view_all_data | Whether the permission set grants View All Data. | |
| profile_id | Owning profile ID, when present. | |
| type | Permission set type. | |
| _ont_name | Yes | Normalized field sourced from name. |
| _ont_scope | Yes | Property generated by the ontology mapping. |
| _ont_source | Module that populated this node's ontology fields. |
Relationships
(:SalesforceOrganization)-[:RESOURCE]->(:SalesforcePermissionSet): A Salesforce organization contains a permission set.(:SalesforceUser)-[:HAS_ROLE]->(:SalesforcePermissionSet): A Salesforce user has an assigned permission set role.
SalesforceProfile
A Salesforce baseline permission profile.
Ontology Mapping: This node uses the ontology label
PermissionRole.
Properties
Ontology-generated fields are shown in italics.
| Field | Index | Description |
|---|---|---|
| id | Yes | Salesforce profile ID. |
| firstseen | Timestamp when a sync job first created this node. | |
| lastupdated | Yes | Timestamp of the last sync that observed this node. |
| created_date | Profile creation timestamp. | |
| description | Profile description. | |
| name | Yes | Profile name. |
| permissions_api_enabled | Whether the profile grants API access. | |
| permissions_manage_users | Whether the profile grants Manage Users. | |
| permissions_modify_all_data | Whether the profile grants Modify All Data. | |
| permissions_view_all_data | Whether the profile grants View All Data. | |
| user_type | User type to which the profile applies. | |
| _ont_name | Yes | Normalized field sourced from name. |
| _ont_scope | Yes | Property generated by the ontology mapping. |
| _ont_source | Module that populated this node's ontology fields. |
Relationships
(:SalesforceOrganization)-[:RESOURCE]->(:SalesforceProfile): A Salesforce organization contains a profile.(:SalesforceUser)-[:HAS_ROLE]->(:SalesforceProfile): A Salesforce user has a baseline profile role.
SalesforceUser
A Salesforce user account with the UserAccount label.
Ontology Mapping: This node uses the ontology label
UserAccount.
Properties
Ontology-generated fields are shown in italics.
| Field | Index | Description |
|---|---|---|
| id | Yes | Salesforce user ID. |
| firstseen | Timestamp when a sync job first created this node. | |
| lastupdated | Yes | Timestamp of the last sync that observed this node. |
| alias | Salesforce user alias. | |
| created_date | User creation timestamp. | |
| department | User department. | |
| Yes | User email address. | |
| federation_identifier | User SSO federation identifier. | |
| first_name | User first name. | |
| is_active | Whether the user is active. | |
| last_login_date | User last login timestamp. | |
| last_name | User last name. | |
| last_password_change_date | User last password change timestamp. | |
| manager_id | ID of the user's manager. | |
| name | User display name. | |
| profile_id | ID of the user's profile. | |
| title | User job title. | |
| user_role_id | ID of the user's role. | |
| user_type | Salesforce user type. | |
| username | Yes | User login name. |
| _ont_active | Yes | Normalized field sourced from is_active. |
| _ont_email | Yes | Normalized field sourced from email. |
| _ont_firstname | Yes | Normalized field sourced from first_name. |
| _ont_fullname | Yes | Normalized field sourced from name. |
| _ont_lastactivity | Yes | Normalized field sourced from last_login_date. |
| _ont_lastname | Yes | Normalized field sourced from last_name. |
| _ont_source | Module that populated this node's ontology fields. | |
| _ont_username | Yes | Normalized field sourced from username. |
Relationships
(:SalesforceOrganization)-[:RESOURCE]->(:SalesforceUser): A Salesforce organization contains a user.(:SalesforceUser)-[:AUTHORIZED]->(:SalesforceConnectedApp): A Salesforce user authorized a connected app through an OAuth token.(:SalesforceUser)-[:HAS_ROLE]->(:SalesforcePermissionSet): A Salesforce user has an assigned permission set role.(:SalesforceUser)-[:HAS_ROLE]->(:SalesforceProfile): A Salesforce user has a baseline profile role.(:SalesforceUser)-[:MEMBER_OF]->(:SalesforceGroup): A Salesforce user is a member of a group.(:SalesforceUser)-[:MEMBER_OF]->(:SalesforceUserRole): A Salesforce user is a member of a user role.(:User)-[:HAS_ACCOUNT]->(:UserAccount)
SalesforceUserRole
A role in the Salesforce record-sharing hierarchy.
Properties
| Field | Index | Description |
|---|---|---|
| id | Yes | Salesforce user role ID. |
| firstseen | Timestamp when a sync job first created this node. | |
| lastupdated | Yes | Timestamp of the last sync that observed this node. |
| developer_name | User role API developer name. | |
| name | Yes | User role name. |
| parent_role_id | ID of the parent role. | |
| portal_type | Portal type associated with the role. | |
| rollup_description | Role hierarchy rollup description. |
Relationships
(:SalesforceOrganization)-[:RESOURCE]->(:SalesforceUserRole): A Salesforce organization contains a user role.(:SalesforceUser)-[:MEMBER_OF]->(:SalesforceUserRole): A Salesforce user is a member of a user role.(:SalesforceUserRole)-[:MEMBER_OF]->(:SalesforceUserRole): A Salesforce user role is a member of its parent role.