Built-in actions

Eleven actions ship with Veles. Each one is a step you can put in a workflow.

Selecting users

The user actions share the same selectors: Users with these profiles, Users with these usernames, Users with these IDs, and an Activate All Users style switch where it applies. Two more switches matter after a refresh:

• Include User Setup: also apply the action to the rows on the User Setup tab. This is how one workflow serves every sandbox.
• Append Org Suffix (on by default): match anna@acme.com to anna@acme.com.uat in the sandbox.

An action handles up to 10,000 users. Veles never touches its own integration users or the admin who started the run.

User actions

Action	What it does	Parameters
Activate Users	Activates and unfreezes the selected users.	User selectors, Activate All Users, Include User Setup, Append Org Suffix
Fix Email Addresses	Removes the .invalid a sandbox copy adds to every email; optionally replaces the domain. Each user gets a confirmation email and has 72 hours to click it.	Target Domain (optional), profile and username filters, Include User Setup, Append Org Suffix
Reset Passwords	Sends a password reset to the selected users. Skips anyone whose email still ends in .invalid, so run Fix Email Addresses first.	User selectors, Include User Setup, Append Org Suffix
Update Profiles	Sets a profile per group of users.	Assignments: Target Profile plus user selectors; Include User Setup, Append Org Suffix
Manage Permissions	Adds or removes permission sets and permission set groups. If one line adds and another removes the same grant, removal wins. The Veles permission sets are never removed.	Assignments: Mode (Add or Remove), Permission Sets, Permission Set Groups, user selectors; Include User Setup; User Setup scope (sets and groups, sets only, groups only); Append Org Suffix

Credential actions

These four write into Salesforce credential metadata on the target org. They need Enterprise Edition or above of Salesforce itself. Secret values come from a configuration field of secret type Credential through a merge field like {{Payment_Gateway.API Key:text:credential}}, allowed only in the parameters marked for it.

Action	What it does	Main parameters
Manage Credential	Creates or updates a principal on an External Credential and sets its authentication parameters. The usual way to restore a secret after a refresh.	Operation (upsert, create, update, patch, delete), External Credential, Principal Name, Principal Type, Authentication Protocol, Authentication Parameters
Manage Named Credential	Creates, updates or deletes a Named Credential.	Operation, Developer Name, Label, Callout URL, External Credential, Type, merge-field and authorization header switches, Parameters
Manage External Credential	Creates, updates or deletes an External Credential, with its principals and parameters.	Operation, Developer Name, Label, Auth Protocol, protocol-specific fields (OAuth URLs, JWT claims, AWS fields), Principals, Parameters
Manage External Auth Identity Provider	Creates, updates or deletes an External Auth Identity Provider.	Operation, Full Name, Label, Authentication Protocol, Authentication Flow, Client Authentication, URLs, Parameters

Named Credential and identity provider changes deploy asynchronously; Veles polls for up to 10 minutes. When deleting, delete the Named Credential before its External Credential.

Automation actions

Action	What it does	Parameters
Run Flow	Starts an autolaunched Flow and can capture one output.	Flow API Name, Flow Inputs (name and value pairs), Output Variable
Deploy Metadata	Deploys one metadata component through the Metadata API: a Remote Site Setting, a Custom Setting, a Custom Metadata record, anything you can express as XML.	Metadata Type, Full Name, Metadata XML, Operation (upsert, create, update); Directory and File Suffix for types Veles does not know

Your own actions

Anything else is an Apex class that extends Veles.Action, registered under Actions > Custom Actions. Enterprise plan. See Custom actions.