--- title: "ScreenMeet Permissions and Roles Overview" slug: "salesforce-permissions-overview-and-roles" description: "Manage user access and security in ScreenMeet with pre-defined and custom permission sets, ensuring tailored roles for your organization’s needs." updated: 2026-04-21T19:23:19Z published: 2026-04-21T19:23:19Z canonical: "docs.screenmeet.com/salesforce-permissions-overview-and-roles" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.screenmeet.com/llms.txt > Use this file to discover all available pages before exploring further. # ScreenMeet Permissions and Roles Overview #### ScreenMeet includes pre-defined roles and permission sets designed to help you manage user access and security across your organization. In addition, administrators can create custom permission sets and groups to fit specific use cases. --- ### Pre-Defined Roles To grant users access to ScreenMeet, apply one or more of the permission sets listed below. | Role | Key Capabilities | Restrictions / Notes | | --- | --- | --- | | **ScreenMeet Service** | - Server-to-server communication - Creates sessions - Writes session data | - Should only be assigned to the Service Account user created by your Salesforce Administrator - Should only have access to objects required for ScreenMeet - Limit scope for security | | **ScreenMeet Admin** | - Full system control - Change global settings & policies - Access all session data - Barge into sessions | - Assign sparingly to trusted admins only | | **ScreenMeet Supervisor** | - Barge into agent sessions | - Cannot change configurations or policies | | **ScreenMeet Beam Group Manager** | - Manage Beam Groups | - Available only in ScreenMeet package version 1.24 and higher - No other admin privileges | | **ScreenMeet Agent** | - Standard user role - Create sessions - Use standard features | - Cannot barge into sessions - No administrative control | ### Best Practice - The **ScreenMeet Service** permission set should only be assigned to the [Service Account](/v1/docs/salesforce-service-account-setup) user created by your Salesforce Administrator - Assign the **ScreenMeet Agent** permission set to all users who create sessions (Live video, Remote Support, Replay, or CoBrowse) - Assign the **ScreenMeet Admin** permission set to system administrators or project leads responsible for maintaining the solution - Consider using **Permission Set Groups** to simplify management. These allow you to combine multiple permission sets into one group that can then be assigned to individual users or roles > [!WARNING] > ⚠️ **Important:** Do not clone permission sets. Cloned permission sets will not receive updates when ScreenMeet introduces new or enhanced role functionality. --- ### Admin pre-approved user (Only 1.27+) With the introduction of the new Salesforce authorization flow, we now require the ScreenMeet Connected App to be assigned to ScreenMeet users. To do so, we recommend creating a new permission set named **ScreenMeet Connected App Access** and configuring it in the following way. 1. Create a new permission set named **ScreenMeet Connected App Access** 2. Go to Permission Set Overview > Assigned Connected Apps 3. Click **Edit** 4. Move ScreenMeet from Installed Connected Apps to Enabled Connected Apps 5. Click on **Save** 6. Assign this new permission set to all ScreenMeet users (agents, administrators, supervisors) --- ### Custom Roles and Permissions With the latest version of ScreenMeet, administrators can tailor access by creating custom permission sets and groups. This is useful when certain agents require more or fewer features depending on their role. **Example:** A tier one agent may be granted access only to the following: - ScreenMeet Live (`screenmeet.Enable Live`) - Audio during sessions (`screenmeet.live Enable Audio`) - Guest screen sharing (`screenmeet.live Guest Screenshare`) To add custom permissions: 1. Open the user’s profile or the relevant permission set. 2. Go to **Custom Permissions** → **Edit**. 3. Add the required permissions (e.g., enable specific products like `screenmeet.Enable Live` or specific behaviors such as `screenmeet.feature: File Transfer`). ****▶ Click to View the Complete Custom Permissions List**** | Cobrowse | Enable Product | cobrowse | Grants the agent access to launch embedded, browser-based support sessions on the customer's web page. | | --- | --- | --- | --- | | Cobrowse | Confidential Overlay | cobrowse_confidentialOverlayEnable | Masks or visually blocks sensitive fields (like credit cards or passwords) on the webpage so the agent cannot see them. | | Cobrowse | Form Fill | cobrowse_formFill | Allows the agent to type into text boxes or interact with form fields on the customer's web page. | | Cobrowse | Highlighter | cobrowse_highlighter | Provides a tool for the agent to draw to highlight specific text or elements on the page. | | Cobrowse | Laser Pointer | cobrowse_laserPointer | Displays a virtual laser pointer cursor on the customer's screen where the agent is pointing, without clicking elements. | | Cobrowse | Link Scrambling | cobrowse_linkScrambling | Obfuscates specific URLs or navigational links to protect customer privacy or proprietary site structures. | | Cobrowse | Recording | cobrowse_recording | Enables the automatic video capture of the browser session activity for auditing or training. | | Cobrowse | Recording Enabled | cobrowse_recordingEnabled | A global or user-level toggle that dictates if the recording module is active | | Cobrowse | Recording - Agent Choice | cobrowse_recording_agent_choice | Provides a UI button for the agent to manually start, pause, or stop the recording at their discretion when creating the session. | | Cobrowse | Remote Control | cobrowse_remoteControl | Upgrades the session from view-only, allowing the agent to actively click and navigate the customer's browser. | | Cobrowse | Screenshot | cobrowse_screenshot | Allows the agent to capture a static image of the current web page view to save to the case/ticket. | | Cobrowse | Session Storage | cobrowse_sessionStorage | Dictates whether session artifacts (like chat logs or metadata) are retained and saved after the session ends. | | Cobrowse | URL Invite | cobrowse_urlinvite | Allows the agent to generate and send a direct link to another agent to join and assist with the session. | | Cobrowse | Video Chat | cobrowse_videoChat | Enables a picture-in-picture webcam feed to communicate face-to-face while navigating the website (Requires ScreenMeet Live product entitlement) | | Live | Enable Product | live | Grants the agent access to the web-based video and audio conferencing meeting tool. | | Live | Audio | live_audio | Enables microphone and audio transmission capabilities within the meeting room. | | Live | Audio - Agent Choice | live_audio_agent_choice | Allows the agent to choose whether audio is enabled or disabled at the start of the session. | | Live | Background Blur | live_background_blur | Provides a visual filter to blur out the user's physical background behind them on the webcam feed. | | Live | Blur Default | live_blur_default | Forces the background blur filter to be applied automatically as soon as the camera is turned on. | | Live | Chat | live_chat | Enables a text-based messaging panel for participants to type to each other during the meeting. | | Live | Guest Change Resolution | live_guest_change_resolution | Allows the customer (guest) to adjust their video stream quality to accommodate poor bandwidth. | | Live | Guest Invite | live_guest_invite | Permits the customer to generate a link to invite external participants into the active meeting. | | Live | Guest Screen Share | live_guest_screenshare | Grants the customer the ability to broadcast their entire desktop or application window to the room. | | Live | Guest Video | live_guest_video | Allows the customer to turn on their webcam to stream video to the agent. | | Live | Host Change Resolution | live_host_change_resolution | Allows the agent (host) to adjust their own video stream quality to manage bandwidth. | | Live | Host Create Child Session | live_host_create_child_session | Enables the agent to spin off a breakout room or escalate the current meeting into a secondary session. | | Live | Host Invite | live_host_invite | Allows the agent to invite additional subject matter experts or participants to the current meeting. | | Live | Host Screen Share | live_host_screenshare | Grants the agent the ability to broadcast their desktop or application window to the customer. | | Live | Host Video | live_host_video | Allows the agent to turn on their webcam to stream video to the customer. | | Live | Knock | live_knock | Enables a "waiting room" feature where attendees must request entry and be admitted by the host. | | Live | Knock - Agent Choice | live_knock_agent_choice | Gives the agent the option to toggle the waiting room on or off, or bypass it entirely for a session. | | Live | Laser Pointer | live_laser_pointer | Provides a highly visible, temporary cursor for pointing out details during a screen share. | | Live | Record | live_record | Enables the capture of the meeting's video, audio, and screen sharing streams. | | Live | Record - Agent Choice | live_record_agent_choice | Allows the agent to manually start, pause, or stop the meeting recording. | | Live | Record - Opt In | live_record_opt_in | Forces a prompt requiring participants to explicitly consent before the recording starts. | | Live | Recording Type | live_recording_type | Determines the format of the recording (e.g., active speaker view vs. gallery view, or cloud vs. local storage). | | Live | Screen Annotations | live_screen_annotations | Allows users to draw, circle, or add text overlays onto a shared screen. | | Live | Start Audio Enabled | live_start_audio_enabled | Automatically activates the user's microphone the moment they enter the meeting. | | Live | Start Video Enabled | live_start_video_enabled | Automatically activates the user's webcam the moment they enter the meeting. | | Live | Zoom | live_zoom | Allows participants to digitally zoom in on a shared screen or video feed for better visibility. | | Remote Support | Enable Product | remotesupport | Grants access to the heavy-duty downloaded client app for full operating system control. | | Remote Support | Auto Login | remotesupport_autologin | Allows the agent's connection to persist and automatically log back in after restarting the remote machine. | | Remote Support | Chat | remotesupport_chat | Enables a standalone text chat window between the agent and the end-user on the remote desktop. | | Remote Support | Laser Pointer | remotesupport_laserpointer | Gives the agent a pointer to indicate items on the remote screen without actually sending mouse clicks to the OS. | | Remote Support | Pre Request Admin | remotesupport_prerequestadmin | Automatically asks the end-user to grant elevated/administrative privileges to the agent upon connecting. | | Remote Support | Pre Request RC | remotesupport_prerequestrc | Automatically prompts the end-user to approve full keyboard and mouse control upon joining, skipping view-only mode. | | Remote Support | Privacy Curtain | remotesupport_privacycurtain | Blacks out the physical monitor of the remote machine so local bystanders cannot see what the agent is doing. | | Remote Support | Reboot | remotesupport_reboot | Gives the agent a quick-action button to initiate a standard restart of the remote machine. | | Remote Support | Recording | remotesupport_recording | Captures video of the remote desktop session for compliance and ticketing purposes. | | Remote Support | Recording - Agent Choice | remotesupport_recording_agent_choice | Allows the agent to manually turn the remote session recording on or off. | | Remote Support | Remote Control | remotesupport_remotecontrol | Grants the agent the ability to send keyboard strokes and mouse clicks to interact with the remote OS. | | Remote Support | Run | remotesupport_run | Provides quick access to a command prompt or Windows "Run" dialog for executing scripts or system commands. | | Remote Support | Safe Reboot | remotesupport_safereboot | Allows the agent to restart the remote machine directly into Safe Mode and automatically reconnect. | | Remote Support | Screenshot | remotesupport_screenshot | Lets the agent capture static images of the remote desktop to attach to support tickets. | | Remote Support | UAC | remotesupport_uac | Allows the agent to view and click on Windows User Account Control (UAC) security prompts on the remote screen. | | Remote Support | URL Invite | remotesupport_urlinvite | Enables the creation of a direct link for the agent to invite other agents into the session | | Remote Support | Whiteboard | remotesupport_whiteboard | Provides drawing tools for the agent to sketch, circle, or write directly over the remote user's desktop interface. | | Remote Support | Windows Tools | remotesupport_windowstools | Gives the agent quick-launch access to native OS utilities (like Task Manager, Registry Editor, or Event Viewer). | ![](https://cdn.document360.io/9da39725-20e5-434f-83a4-d630456099dc/Images/Documentation/image-1666629423979.png) --- ### Field-Level Security Make sure to configure field-level security for the field: - `screenmeet__Has_SM_sessions__c` on Cases This field is used in reporting to compare cases with and without ScreenMeet sessions. --- ### Additional Resources - Salesforce: Permission Set Groups Overview - Introducing the Next Generation of User Management: Permission Set Groups IP Ranges If you enforce IP range restrictions, please navigate to the [IP Ranges](https://docs.screenmeet.com/v1/docs/salesforce-ip-ranges) section.