Configuration Settings for Nablasol Azure DMS

• User can either use an existing storage account or can create a new one on Azure end. This storage account name will then be saved in Azure Storage Account Name field of custom metadata type.


• Once an Azure Storage account is created, we can create a file share which will be same for Azure Share Name.


• Within this file share we can further add a directory and same will be saved in the Directory field of Custom Metadata Type.


• The user can further apply IP restrictions by navigating to the Networking option of the earlier created Azure Storage Account.


• SAS Token can be retrieved by using Shared access signature option wherein all the 3 checkboxes for allowed resource type; namely Service, Container, Object are checked. This sas token will further be saved in SAS Token field of Custom Metadata.


• Moving further to Resource sharing (CORS) add salesforce org URL in allowed origins, check all the boxes for allowed methods, enter *(asterisk sign) in allowed headers and exposed headers both.


• Max age will have values as 86400.

Note: Package consists of one Custom Metadata Type labeled as "Azure DMS Credential". Subscribers need to create a single record labeled as "AzureDMS" and add appropriate values in respective fields.

• Azure URI: This field will contain a URI i.e. Uniform Resource Identifier which is being used for calling Azure API. (eg: https://test.file.core.windows.net/ ('/' this sign should be used mandatorily at the end of URL and "test" will be replaced with Azure Storage Account Name))


• Azure Share Name: This field will contain the name of the share that is being used in Azure fileShare. (eg: testshare)


• Azure Storage Account Name: This field will contain the storage account name where all directories and files are to be stored in Azure fileshare.


• SAS Token: This field will contain the SAS Token for authentication at the Azure end with Salesforce and can be retrieved by following instructions mentioned in Step 1. (make sure that SAS token always starts with '?' sign)


• Directory: This field will contain the Directory Name where you want to store files in Azure. (eg: TestAzureDirectory)


• Default Folders: Enter any default folders you want to get created in the Azure file share in a comma separated way without space.(eg: Identity Docs,Additional Documents,Test1,Test2).(Note: Operations like Delete, Rename and Move are disabled on this default folders. These folders can only be copied to another folders if needed)

• Salesforce allows us to access external Azure Resources from a Salesforce application for our organization; for which we first have to register it with Remote Site Settings.


• Created Remote site settings URL will be similar to Azure URI of Custom Metadata Type excluding '/' at the end.(eg: https://test.file.core.windows.net)

• Package consists of permission set labeled as "LWC access" which when assigned to a particular user or a set of Users will allow access of the entire LWC component.

• Package consists of 3 custom permissions labeled as "Can Create Folder", "Can Delete Files & Folders" and "Can Move Files & Folders" which when assigned to users will give explicit permissions to create folders, delete or move files and folders respectively.