How do I allow the update of sales contacts while protecting ERP contacts from being edited?

When you sync accounts and contacts from Financials to Sales, the ERP contacts can be edited in Sales just like sales contacts. The sales and ERP contacts are indistinguishable. To protect the ERP contacts from being edited, you must create a way to distinguish between the two types of contacts and then update security to allow editing only for the sales contacts.

For example, you can do the following:

  1. Create a custom field on Application Composer that's set to a specific value when the contacts are created in Sales.
  2. Remove contact edit access for all the sales job roles.
  3. Use Access Management to add edit access to contacts that are flagged as sales contacts.