Permission Sets

Fours uses Salesforce Permission Sets to strictly control user access. These permission sets determine which Fours Tabs are visible to a user and which Action Buttons (e.g., Create Private Offer) appear on their record pages.

For configurations related to the external Fours Integration platform (such as API credentials or mapping rules), please refer to the Fours Integration Setup Guide.

How to Access Permission Sets

To view or assign these permissions in your Salesforce environment:

1. Click the Gear Icon (⚙️) in the top-right corner of the screen and select Setup.

2. In the Quick Find box on the left sidebar, type Permission Sets.

3. Select Permission Sets from the results to view the list of available Fours permissions.

4. All Fours-related permission sets begin with the prefix Fours. Assign the appropriate set based on the user’s role in your sales cycle.

Fours provides granular Permission Sets to control access based on Role (Admin vs. User), Module (Marketplace vs. Co-sell), and Cloud Partner (AWS, Azure, GCP).

Use the tables below to assign the correct permissions to your users.

Core Roles & Admin Permissions

These permission sets provide high-level access control.

Co-Sell Cloud-Specific Permissions

Use these permissions to restrict a user’s Referral access to a specific Cloud Provider.

These permissions also affect the user’s visibility into CoSell Insights, such as Engagement Score, Possible Sales Reps, and related metrics.

These permissions do not grant access to Offers, Entitlements, Products, or Companies(Buyers).

Marketplace Cloud-Specific Permissions

Use these permissions to restrict a user’s Offer & Entitlement access to a specific Cloud Provider. These permissions exclude access to Referrals.

Lead Access

AWS co-sell leads are governed by the AWS referral permissions, not by a set of their own: reading the Leads tabs needs AWS referral read, and accepting, rejecting, qualifying, converting, or linking a lead needs AWS referral write.

Funding Permissions

Use these permissions to grant access to AWS Funding features (e.g., Fours Funding Request objects, funding approval workflows). These are typically assigned in addition to a marketplace permission set when a user needs to manage funding alongside their normal Offer/Entitlement work.

Both sets make the Funding V2 (Fours) tab and the Funding object’s own tab visible. Funding records are searchable in Salesforce global search — see How Funding records open.

Both sets also cover Funding Credit Code (Fours) records — the AWS credit codes issued on a funding request, one record per code (see FundingCreditCode__c). Fours Funding grants read, create, and edit access to them, and Fours Funding (Read Only) grants read access; neither grants delete. Fours User and both Fours Integrator sets carry full access to them.

Add-on Permissions

These permission sets do not grant a baseline level of access on their own — they layer specific feature capabilities on top of a primary permission set.

Custom Permissions

For detailed information about the custom permissions included in each permission set, see Custom Permissions.