Control Who Gets Read Access to Custom Metadata Types

Use profiles and permission sets to assign read access to users for custom metadata types. As of Spring ’19, you can block all API read access to custom metadata types for users who don’t have Customize Application permission. Now you can grant API read access to specific metadata types for users and user profiles, even if they don’t have the Customize Application permission.

Where: This change applies to Lightning Experience and Salesforce Classic in Professional, Enterprise, Performance, and Unlimited editions.

Who: Admins with the Customize Application permission can modify permission sets and profiles to grant direct read API access to a specific custom metadata type.

How: To grant a specific profile or permission set read access to a custom metadata type, go to the Custom Metadata Types permissions.

Custom Metadata Types setting on permission set page.

Edit the profile or permission set to add the desired custom metadata type to the list of enabled custom metadata types.

Add the custom metadata type to the permission set.