Enable Access to Metadata Without Enabling Access to Data, Too (Beta)

If a user requires access to metadata but not to data, enable the new Modify Metadata permission to give the access the user needs without providing access to org data. Users can create, edit, and delete org metadata but not org data. Users must have appropriate access rights to the metadata they’re trying to modify. Modify Metadata is enabled automatically when the Deploy Change Sets permission is selected.

Where: This change applies to Lightning Experience, Salesforce Classic, and all versions of the mobile app in Professional, Performance, and Unlimited editions.

Some metadata types currently require the Modify All Data permission. If a user doesn’t also have the Modify All Data permission, updates of these metadata types fail. The Modify Metadata permission is beta when enabled without also enabling the Modify All Data permission.
Note

Note

As a beta feature, the Modify Metadata permission is a preview and isn’t part of the “Services” under your master subscription agreement with Salesforce. Use this feature at your sole discretion, and make your purchase decisions only on the basis of generally available products and features. Salesforce doesn’t guarantee general availability of this feature within any particular time frame or at all, and we can discontinue it at any time. This feature is for evaluation purposes only, not for production use. It’s offered as is and isn’t supported, and Salesforce has no liability for any harm or damage arising out of or in connection with it. All restrictions, Salesforce reservation of rights, obligations concerning the Services, and terms for related Non-Salesforce Applications and Content apply equally to your use of this feature. You can provide feedback and suggestions for the Modify Metadata permission by posting in Collaboration or Ideas in the Trailblazer Community.

Why: For example, to deploy change sets, users previously had to have both the Deploy Change Sets permission and the Modify All Data permission. Users now need only the Deploy Change Sets permission and the Modify Metadata permission to deploy a change set.