Glossary

Storage setup borrows vocabulary from four different clouds, and each one has its own word for the same idea. Use this page when a setup screen uses a term you have not met.

Storage terms

Bucket - the named space that holds your files, in Amazon S3, S3-compatible providers, and Google Cloud Storage. Bucket names are globally unique across the whole provider.

Container - the Azure equivalent of a bucket. A container lives inside a storage account.

Storage account - the Azure namespace that holds blob containers, file shares, queues, and tables. Each account has its own URL of the form <account>.blob.core.windows.net.

Region - the single location a bucket or storage account lives in. The region you enter in Sliick Settings must match the bucket’s region exactly, or signed requests fail.

CORS - the cross-origin rule on your bucket, container or storage account that lets the browser upload directly to it. Without it, uploads from the Sliick Files UI fail even though server-side calls from Salesforce keep working.

Bucket versioning, Object Versioning, soft delete - the provider’s own setting that keeps a deleted object recoverable. Amazon S3 and S3-compatible providers call it bucket versioning, Google Cloud Storage calls it Object Versioning, Azure calls it soft delete for blobs. It is what makes Sliick’s Restore work, and it is a different thing from Sliick’s own version history.

Endpoint - the host Sliick signs its requests against for an S3-compatible provider. Optional for standard Amazon S3, required and usually region-specific for everything else.

Storage root folder - the single folder everything Sliick manages lives under, Salesforce-Files-<your org id> by default. Letters, numbers, hyphens and underscores only, and 50 characters maximum.

Presigned URL, signed URL, SAS URL - a short-lived link that lets the browser read or write one specific file, without the storage being public. Amazon S3 and Google Cloud Storage call it presigned or signed; Azure calls it a SAS URL.

Provider identities

IAM user and IAM policy - in AWS, the non-human identity Sliick Files signs in as, and the JSON document that says exactly what it may do on which bucket.

Access key - the ID and secret pair Sliick Files signs its AWS or S3-compatible requests with.

Service account - Google Cloud’s equivalent of an application identity: non-human, used by integrations. The HMAC key is tied to a service account, not a person.

HMAC key - the access key and secret pair Google Cloud Storage issues for AWS-S3-style signed requests. Sliick uses this rather than native OAuth so the same signing works across S3, R2 and Google Cloud Storage.

Account key - the Azure storage account’s shared secret. Azure issues two, key1 and key2, so you can rotate without downtime. It grants full access to everything in the storage account and cannot be scoped to a single container.

Microsoft and SharePoint terms

Tenant - your organisation’s Microsoft 365 account. The tenant owns Entra ID, SharePoint Online, Exchange, and so on. Its identity is a GUID, the Tenant ID.

Entra ID - Microsoft’s identity service, formerly Azure AD.

Subscription - in Azure, the billing boundary. Your free trial or paid plan lives here.

Resource group - in Azure, a folder for resources you manage and bill together.

App registration - the Entra ID record that represents a third-party application, Sliick Files here. It holds the Client ID, secrets, and permission grants.

Client ID and Client Secret - the Application (client) ID from the app registration, and the password Entra accepts when Salesforce proves it is the Sliick app.

Service Principal, or Application permission - the app calls Microsoft Graph as itself, with no user context. Best for back-end integrations.

Delegated permission - the app calls Microsoft Graph on behalf of a signed-in user. Best when you want SharePoint audit trails to show the human, not the app.

Admin consent - the moment a tenant admin clicks “Grant admin consent” and the permission becomes usable. Without consent, every Graph call returns 403.

Sites.Selected - the least-privilege Graph permission Sliick Files uses. The app has no access to anything by default, and you explicitly grant it the single site it will manage.

Redirect URI, or Callback URL - the same value under two names. Microsoft calls it a Redirect URI, Salesforce calls it a Callback URL, and Delegated mode needs the Salesforce one registered in Microsoft.

Record folder - the folder Sliick creates in a SharePoint library, named {Record Name} - {recordId}. Two-way sync matches a SharePoint file back to a Salesforce record by this folder, and skips files that are not in one.

Salesforce terms

Sliick Settings - the screen where you choose a storage provider and enter its credentials. Reached from the Sliick Admin app, on the Storage Settings tab.

Sliick Cloud Storage - storage Sliick operates on your behalf, kept separate per org. Nothing to create, no keys to manage, and no credentials to enter.

Deleted Files - the admin tab that lists deleted files for 100 days and offers Restore, where the storage provider’s own recovery setting allows it.

Diagnostics - the admin-only tab in Storage Settings showing connection status, processing health, files stuck in Pending, and the last 50 storage log entries.

Storage Log - the record written for every file operation. Entries older than 30 days are deleted automatically.

Migration - the admin batch job that brings an org’s existing Salesforce files under Sliick management, one source object at a time.

Two-way sync - the premium option that reflects changes made directly in your storage back onto the Salesforce record.

External Credential Principal Access - the permission-set entry that authorises a user to use the storage credential Sliick creates when you connect. Every provider needs one, on a permission set you control.

Integration User - the dedicated Salesforce user that Sliick’s setup runs as. Set up once per org, before connecting any external storage provider.

Media processing, or the Image Processing Pipeline - the optional Sliick Settings section that routes newly uploaded images through Sliick’s processing service for HEIC to JPEG conversion, EXIF orientation correction, resizing, and thumbnails. It is off by default, and it is the one setting that changes where your file bytes travel. The Storage Settings rail labels it Media Processing with an Enable Pipeline toggle. See your provider’s data residency page.