Installation
Installing ControlLayer takes a few minutes. Start in a sandbox.
Requirements
- Salesforce Enterprise Edition or above
- A user with permission to install packages and assign permission sets (typically a System Administrator)
1. Install the package
Early access
During early access, the install link is provided directly when you join the program. At general availability, ControlLayer will install from its AppExchange listing.
- Open the install link while logged into the target org (sandbox recommended first).
- Choose Install for Admins Only. You will widen access deliberately with permission sets in the next step.
- Complete the installation and wait for the confirmation email if Salesforce processes it in the background.
The installer seeds ControlLayer's enforcement settings automatically - enforcement is correct from the first minute, with nothing bypassed.
2. Assign permission sets
ControlLayer ships two permission sets:
| Permission set | Grants | Assign to |
|---|---|---|
ControlLayer_Bypass_Admin |
Create and manage bypass windows via the wizard and dashboard | The small group of admins who run data operations |
ControlLayer_Settings_Admin |
Edit org-level defaults and guardrails (maximum duration, required end dates, retry ceiling) | Whoever owns governance policy - often a subset of the above |
Assign via Setup → Permission Sets, or with the CLI:
sf org assign permset --name ControlLayer_Bypass_Admin --target-org MyOrg3. Verify
- Open the ControlLayer app from the App Launcher.
- Check the dashboard's engine-health indicator: it should report the engine as healthy. If it warns that the scheduler is not running, follow the steps in Engine health.
- You should see an empty dashboard - no windows yet. That's the correct starting state: everything enforced, nothing bypassed.
Next step
Govern your first automation and run a window end-to-end: Quick start.