Salesforce Facts by Abhishek

Suppose we want to restrict all the users from querying and extracting data from the Account object. We can create a transaction security policy on the API event for the same. Attached are the screenshots.

Permission for a flow is checked only at the top level. For example, flow A calls flow B. User X has a profile that can access flow A but not flow B. User X can execute flow B, but only through flow A. User X can’t execute flow B directly. Reference:  https://help.salesforce.com/s/articleView?id=sf.flow_distribute_security.htm&type=5