Salesforce Account and User Permissions

Updated

Verify that you can access the Salesforce account and that you have the required Salesforce user permissions.

Account Access Requirements

You must have an admin user account that can connect to Salesforce.

Best practices: To ensure that all data is backed up and restored, create an app for one Salesforce user account that has a System Administrator profile or an equivalent profile.

If you create a new user for backup and restore operations, verify that the new user exists in both production and sandbox environments. Additionally, verify that the new user's Community Nickname is the same in all environments.

It is recommended to create a permission set with the Query All Files permission and assign it to the user performing the backup and restore operations. You can also clone the standard System Administrator profile, assign it to the user, and then enable the Query All Files permission.

User Permission Requirements

Permissions for Backups

The Salesforce users who perform the backup operations must have the correct permissions set in their Salesforce user profiles.

Data to back up

Required permissions

Organization

  • System Administrator profile or an equivalent profile

  • At least Read permission for all standard fields and custom fields.

Salesforce CRM Content

Query All files

Private Chatter messages and direct messages

Manage Chatter Messages and Direct Messages

Knowledge articles

  • The user who is configured to perform backups needs access to the knowledge objects.

  • The user must have an active Knowledge User license to back up knowledge objects.

Encrypted Salesforce data

View Encrypted Data

Note: If you perform a backup without the View Encrypted Data permission, the masked data is backed up.

Metadata

  • Download AppExchange Packages

  • Modify Metadata Through API Functions

Note: Additional permissions may be required to perform backup operations on objects that require specific feature licenses.

Permissions for Restores

The Salesforce users who perform certain types of restore operations must have the correct permissions set in their Salesforce user profiles.

Data to restore

Required permissions

  • The Full Salesforce Sandbox

  • Salesforce Data to Salesforce

  • System Administrator profile or an equivalent profile

  • Read/write/modify access to the objects involved

Salesforce Metadata to Salesforce

System Administrator profile or an equivalent profile

Encrypted Salesforce data

View Encrypted Data

Note: Certain types of restores, such as single-record restores, contain encrypted data.