Winter '27 introduces a dedicated permission for the Setup Audit Trail via a release update, tightening security posture around Setup access.
Where
Setup, under Release Updates. The new View Setup Audit Trail permission is assigned through profiles or permission sets.
How
Once the update applies, viewing the Setup Audit Trail requires the View Setup Audit Trail permission instead of the broad View Setup and Configuration permission. Existing access is preserved automatically; for new users who need audit trail access, assign the dedicated permission.
Why
Auditors and compliance users often needed the audit trail but received full Setup visibility as a side effect. A dedicated permission follows the principle of least privilege: grant exactly the access needed and nothing more.