91导航

Two views, one org: mapping business processes to Salesforce metadata

Two views, one org: mapping business processes to Salesforce metadata

Andy Barrick on

Share with



Most people who鈥檝e worked in Salesforce for any length of time know the feeling. You open an org you didn鈥檛 build, you鈥檝e got a change to make, and you have no real idea what that change will touch. So you make it as carefully as you can, and then you wait.

Sometimes nothing happens. Sometimes a problem surfaces weeks later in production, and you lose a day trying to reproduce it in a sandbox where it stubbornly refuses to go wrong. And by the time you鈥檝e found it, every org you鈥檇 fix it in has moved on. This isn鈥檛 just annoying. It slows delivery, runs the risk of downtime and security gaps, and makes bringing AI into the process safely much harder than it should be.

I鈥檝e been in that situation more than once. I started out as a lead engineer at an ISV, where architectural discipline was a given and things generally worked smoothly. Then I moved into professional services and met real orgs for the first time: years of accumulated change, built by people who had long since moved on, documented in whatever form somebody had capacity for at the time. Having seen both sides, I don鈥檛 think the difference comes down to skill or care. It comes down to whether anyone in the room can describe the org in both of the languages it exists in.

This post explains what the two languages are, how they drift apart, why the gap is getting more expensive to live with, and how to start closing it.

What business process mapping means in Salesforce

Before going further, it鈥檚 worth being clear about terms, because 鈥減rocess mapping鈥 means slightly different things depending on who鈥檚 using it. A business process map is a visual representation of how work gets done: what the business does, who鈥檚 responsible for each step, how tasks move between people, and how success gets measured. There鈥檚 no definitive answer to how many levels a process map should have, or how many steps a business process contains, but it should cover enough detail to remove ambiguity about what happens and who does it.

Salesforce encodes processes as metadata, so the map and the org should describe the same thing. When they don鈥檛, you meet the difference in production.

San Francisco, CA

Dreamforce

Find out more

One org, two ways of seeing it

I describe it like this: picture a sports fan punching the air at a match. Most people watching would read that as pure emotion. A biomechanist looking at the same moment sees a sequence of interconnected physical operations: nerves firing, muscles contracting, tendons doing their job. Same event, two completely different readings, both entirely valid.

Salesforce orgs work the same way. End users, business analysts, and product owners think of the org as a collection of business processes: quote approval, case escalation, renewal handoff. Delivery teams think in metadata components: triggers, Flows, permission sets, validation rules, Apex classes.

Neither view is wrong, and neither is complete. The problem is that the two rarely get reconciled, and that鈥檚 why every change carries risk 鈥 it鈥檚 happening right where they meet. You鈥檙e handed a requirement expressed in a business language you don鈥檛 fully know, to be implemented in an org whose metadata is equally unfamiliar. The doubt you feel at that moment isn鈥檛 a personal failing. It鈥檚 the gap between the two views, and you鈥檙e standing in it.

Why AI makes this urgent

Complex orgs aren鈥檛 new, so it鈥檚 fair to ask why this matters more now than it did five years ago. The answer is that AI has arrived, and it has arrived unevenly.

Right now, AI is most prevalent in the build stage of the DevOps lifecycle. It writes code, generates Flows, and drafts configuration faster than any of us could by hand. But building faster only helps if everything downstream keeps pace. found that 90% of technology professionals now use AI at work, and that higher AI adoption is associated with an increase in software delivery throughput and an increase in software delivery instability at the same time. Building faster doesn鈥檛 remove the bottleneck. It moves the bottleneck downstream and piles pressure on the parts of your process least able to absorb it.

Any time saved during creation frequently gets reallocated to auditing and verification. That only works if you understand the org well enough to audit it. If you don鈥檛 know what a change touches, verification is guesswork, and the time you saved goes on hesitation instead.

The cost impact compounds this. found that fixing a problem after delivery often costs far more than fixing it during requirements and design. Catch a duplicated field at the point somebody proposes it and the fix is a conversation. Find it during development and it costs more, through context switching, rework, and retesting. Catch it once it鈥檚 in production, populated with data, referenced by three integrations, and reported on by the finance team, and you鈥檙e not fixing anything. You鈥檙e disassembling, and the damage is something you might not even be able to put a number on.

Business processes outlive metadata

Of the two views, business processes are far more stable, so that鈥檚 where I鈥檇 start. On the most successful projects I鈥檝e worked on, the first phase was always understanding the business, not opening a repo or logging into an org.

Businesses have been issuing quotes and closing opportunities for decades, and they鈥檒l still be doing it in five years鈥 time. But the components underneath may be rebuilt twice over by then. Workflow rules became Process Builders, and Process Builders became Flows. I鈥檝e worked on plenty of refactoring projects where the goal was better performance, or taking advantage of platform capabilities that didn鈥檛 exist when the thing was built. The process never changed, but the implementation changed completely.

That鈥檚 why org documentation becomes outdated and unreliable so quickly. Most of it documents the implementation, which is the layer guaranteed to change. Six months after somebody writes it, half the fields it describes have been replaced and the screenshots show a UI that no longer exists. So people stop trusting it, and then stop maintaining it. Spreadsheets, wikis, and Schema Builder diagrams all share the same flaw: they depend on a person remembering to update them, and they鈥檙e usually out of date the moment they鈥檙e finished.

What holds its value is a map between the two views: a shared description of what the org does in business terms, connected to the metadata that delivers each part of it. Building that map is what lets a developer become the biomechanist, fluent in both the outward behavior and the mechanics underneath. It鈥檚 also the point where conversations with the business stop being translation exercises.

Three traditional ways to map your org

Done properly, mapping gives you something durable: a picture of what the org does that stays true even as the components underneath get rebuilt. Three well-established options get you there. None of them are quick, and in practice I鈥檇 lean on the first two.

Speak to the business. Product owners and end users know what the org does for them, because they live in it. Ask what their day-to-day roles actually involve, and which parts of the application would bring them to a standstill if they broke. The logistics of identifying who to ask and finding time in their calendar can be slow, especially in a large business. And each conversation only gives you one person鈥檚 slice of the picture. But this was always by far my most productive route 鈥 sitting with end users at their desks, and going out in the field to watch people use the mobile app.

Review the regression tests. Anything tested and quality-assured before release is something the business cares enough about to protect. That makes an existing test suite a genuine map of business priority. But this only works if the tests exist, cover business processes rather than code coverage targets, and have been maintained.

Assess the historical tickets. An application鈥檚 functionality should be the sum of all its current acceptance criteria, and the ticket history is where those criteria live. But this is where I鈥檇 stop short of recommending it as a discovery method. It鈥檚 slow, it鈥檚 expensive, and it鈥檚 error-prone if you don鈥檛 already know what you鈥檙e looking for 鈥 a ticket can teach you something a later ticket quietly superseded, and nothing in the history flags that. Where I have found it useful is the narrower question: working out what actually went into a release.

Each of these gives you a partial view, and stitching them together is the actual work. That鈥檚 why so many teams never finish, and settle instead for knowing the parts of the org they touch most often.

The next challenge is mapping those processes to the components that implement them. Salesforce鈥檚 native dependency tooling gets you part of the way. The 鈥淲here is this used鈥 button covers core metadata types but not all of them, and the Dependency API underneath it caps results per query, offers no support for ORDER BY or LIKE, and burns through API limits as it runs. For an org with thousands of Apex classes and Flows, that stops being practical.

How AI changes org discovery

This is where the picture has genuinely changed. The barrier that made discovery expensive was never comprehension 鈥 it was access. Org intelligence solutions remove most of that barrier by reading the metadata directly and answering questions about it in plain language, taking a fraction of the time.

One caveat I鈥檇 flag though. AI reads the org as its source, so its answers describe what the application does, not what it was intended to do. Any bug in the implementation gets reported back as correct functionality, because nothing in the metadata records the intent. Usually that gap is small, but you can鈥檛 assume it always will be.

The gap is really a symptom of something else: changing orgs directly instead of going through version control. Where changes get reviewed and recorded before they ship, the intent lives somewhere 鈥 in the pull request, the ticket, the review conversation. Where they don鈥檛, the org is the only record you have, and the org can鈥檛 tell you what was supposed to happen. It means AI should only supplement your discovery, not replace it completely.

So use AI to get fluent fast, then verify what you鈥檝e learned with the people who know what the org is supposed to do. The difference from the old approach isn鈥檛 that you skip the conversation with the business. It鈥檚 that you arrive at it already speaking their language, asking sharper questions, and taking far less of their time.

Build a reliable map with 91导航

The 91导航 Agent and Org Intelligence give you a live picture of your org鈥檚 metadata 鈥 covering configuration, code, automation logic, page layouts, and permissions 鈥 refreshed daily or on demand. That solves the documentation problem structurally rather than through discipline. Nobody has to remember to update it, so it stays current.

Together they help in three ways when you鈥檙e connecting processes to components:

  • Dependency mapping answers 鈥渨hat does this touch?鈥. Before you edit, delete, or deploy a component, Org Intelligence shows you the full dependency chain in both directions: what depends on the item, and what the item depends on. That includes references across Flows, validation rules, Apex, page layouts, and Lightning web components. The question that used to mean an afternoon of searching takes seconds, and the results export if you need to share them with stakeholders or attach them to a change request.

  • Plain-language questions replace archaeology. The 91导航 Agent lets you ask about your org the way you鈥檇 ask a colleague who built it. Where is this field used? What would this permission change affect? Why is this Lightning page slow? Answers come back with the reasoning behind them, grounded in your actual metadata.

  • AI-generated descriptions fill the gaps. Where components have no documentation, and most orgs have plenty, Org Intelligence generates explanations of what each item does and how it fits the wider org. That turns a wall of unfamiliar API names into something a new starter, a consultant, or you on a Monday morning can actually read.

The practical effect is that the discovery work stops being a project and becomes something you do as you go. Setup only takes around 20 minutes per org, and Org Intelligence reads metadata only, never your customer records.

What the map unlocks

Mapping processes to metadata isn鈥檛 the end of the work. It鈥檚 the thing that makes the rest of the work possible, and each step after it depends on the one before.

Once you know which business processes matter, you know what to protect. Automated Testing can be built around those processes to stop breaking changes reaching production. And once components are mapped to processes, Code Reviews hold the line automatically, so the org doesn鈥檛 drift back into the state you just dug it out of. Observability then tells you when something has gone wrong anyway, before your users do.

That鈥檚 the shape of the wider framework: visibility first, then stability, then control. Every part of it rests on knowing what your org actually does, which is why the mapping work comes first and why skipping it makes everything downstream more expensive.

The return on that groundwork also compounds in a way that鈥檚 easy to underestimate. Guardrails built on a solid understanding of the org keep paying out on every change that follows, for as long as they鈥檙e maintained and fit for purpose. A small saving on every feature accumulates quickly, and before long it dwarfs the original investment.

None of this happens in a sprint. Regaining control of a complex org is a process, not a single action. But the starting point has never been more accessible than it is now, and you don鈥檛 need the whole picture before you begin. Understanding one core business process properly, end to end, in both languages, is an improvement you carry into the next project and every one after it.

Close the gap between the two views

If you want to understand what your own org actually does and how to get visibility, stability, and control back, 91导航 can help. Start a or book a demo and our team will show you how it works in practice.

If you want to dive into more detail on this topic, watch my session 鈥淏ring visibility, stability & control to your Salesforce org鈥 at 91导航鈥檚 Taking control of complex orgs virtual summit, where I cover this framework.

Ready to get started with 91导航?