Assigning custom roles and permissions
Access to Spanning Backup for Salesforce is controlled by the Salesforce administrator. By default, Spanning Backup is installed only for Salesforce administrators (users that have the administrator profile and privileges in Salesforce). Additionally, Spanning provides a default setting that verifies the permissions of the logged-in user to ensure they have been granted proper access to your Salesforce.com data.
The Salesforce administrator can grant further access to Spanning by configuring Salesforce and by disabling the permissions check within Spanning Backup.
By default, the Spanning Backup accounts that are created for Salesforce administrators enable users to perform all Spanning Backup operations.
For more granular control of which Spanning Backup for Salesforce functions an administrator can access, you can opt to enable or disable user roles and permissions. See these topics for details:

Spanning roles and permisisons are described in the following table:
Role or permission type |
Description |
---|---|
Administrator |
Administrator is the default role. This role allows access to all Spanning Backup functions. Only the Administrator can assign or un-assign the Administrator role from other users. |
Backups | Allows a user to manually start a backup on demand. (For details, see Running a backup.) |
Metadata Compare | Allows a user to view and run a Metadata Compare. (For details, see Comparing metadata.) |
Settings | Allows a user to view and make changes to Spanning Backup for Salesforce settings. Configurable settings include: the automated backup schedule, notifications, Dashboard configuration, user permissions, rule-based alerts, the external API key & secret, and backup data deletion and anonymization. (For details, see Configuring Spanning Backup settings.) |
Permissions |
Allows the user to add or remove permissions from Spanning Backup users. Requires the Settings permission to be added as well. |
Backup Data Deletion And Anonymization |
Allows the user to use the Backup Data Deletion and Anonymization feature to remove or overwrite sensitive Spanning Backup for Salesforce data. For details, see Handling sensitive data. Requires the Settings permission to be added as well. |
Exports | Allows the user to export data from backup. For details, see Exporting data. |
Restores |
Allows the user to restore data from backup. For details, see Restoring object data or Restoring metadata. |
API Usage |
Allows the user to access the API usage feature. For details, see Spanning's REST API call limit. |
Activity History |
Allows the user to access the Activity History feature. For details, see Viewing application activity. |
External API Key & Secret |
Allows the user to view or modify the external API key & secret used by the Spanning backup process. For details, see Configuring the external API key and secret. Requires the Settings permission to be added as well. |