--- url: https://veles.beyondthecloud.dev/docs/guide/actions.md description: Every action Veles ships, what it does and its parameters. --- # Built-in actions Eleven actions ship with Veles. Each one is a step you can put in a [workflow](/docs/guide/workflows). ## Selecting users The user actions share the same selectors: **Users with these profiles**, **Users with these usernames**, **Users with these IDs**, and an **Activate All Users** style switch where it applies. Two more switches matter after a refresh: * **Include User Setup**: also apply the action to the rows on the [User Setup](/docs/guide/user-setup) tab. This is how one workflow serves every sandbox. * **Append Org Suffix** (on by default): match `anna@acme.com` to `anna@acme.com.uat` in the sandbox. An action handles up to 10,000 users. Veles never touches its own integration users or the admin who started the run. ## User actions | Action | What it does | Parameters | | ----------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Activate Users** | Activates and unfreezes the selected users. | User selectors, **Activate All Users**, Include User Setup, Append Org Suffix | | **Fix Email Addresses** | Removes the `.invalid` a sandbox copy adds to every email; optionally replaces the domain. Each user gets a confirmation email and has 72 hours to click it. | **Target Domain** (optional), profile and username filters, Include User Setup, Append Org Suffix | | **Reset Passwords** | Sends a password reset to the selected users. Skips anyone whose email still ends in `.invalid`, so run Fix Email Addresses first. | User selectors, Include User Setup, Append Org Suffix | | **Update Profiles** | Sets a profile per group of users. | **Assignments**: **Target Profile** plus user selectors; Include User Setup, Append Org Suffix | | **Manage Permissions** | Adds or removes permission sets and permission set groups. If one line adds and another removes the same grant, removal wins. The Veles permission sets are never removed. | **Assignments**: **Mode** (Add or Remove), **Permission Sets**, **Permission Set Groups**, user selectors; Include User Setup; **User Setup scope** (sets and groups, sets only, groups only); Append Org Suffix | ## Credential actions These four write into Salesforce credential metadata on the target org. They need Enterprise Edition or above of Salesforce itself. Secret values come from a configuration field of secret type **Credential** through a merge field like {{Payment\_Gateway.API Key:text:credential}}, allowed only in the parameters marked for it. | Action | What it does | Main parameters | | ------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Manage Credential** | Creates or updates a principal on an External Credential and sets its authentication parameters. The usual way to restore a secret after a refresh. | **Operation** (upsert, create, update, patch, delete), **External Credential**, **Principal Name**, **Principal Type**, **Authentication Protocol**, **Authentication Parameters** | | **Manage Named Credential** | Creates, updates or deletes a Named Credential. | **Operation**, **Developer Name**, **Label**, **Callout URL**, **External Credential**, **Type**, merge-field and authorization header switches, **Parameters** | | **Manage External Credential** | Creates, updates or deletes an External Credential, with its principals and parameters. | **Operation**, **Developer Name**, **Label**, **Auth Protocol**, protocol-specific fields (OAuth URLs, JWT claims, AWS fields), **Principals**, **Parameters** | | **Manage External Auth Identity Provider** | Creates, updates or deletes an External Auth Identity Provider. | **Operation**, **Full Name**, **Label**, **Authentication Protocol**, **Authentication Flow**, **Client Authentication**, URLs, **Parameters** | Named Credential and identity provider changes deploy asynchronously; Veles polls for up to 10 minutes. When deleting, delete the Named Credential before its External Credential. ## Automation actions | Action | What it does | Parameters | | ------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Run Flow** | Starts an autolaunched Flow and can capture one output. | **Flow API Name**, **Flow Inputs** (name and value pairs), **Output Variable** | | **Deploy Metadata** | Deploys one metadata component through the Metadata API: a Remote Site Setting, a Custom Setting, a Custom Metadata record, anything you can express as XML. | **Metadata Type**, **Full Name**, **Metadata XML**, **Operation** (upsert, create, update); **Directory** and **File Suffix** for types Veles does not know | ## Your own actions Anything else is an Apex class that extends `Veles.Action`, registered under **Actions > Custom Actions**. Enterprise plan. See [Custom actions](/docs/developer/custom-actions).