For a more secure setup, start by creating a new permission set called Affinity Integration and set the License Type to Salesforce API Integration.
Start by assigning full Read/Write Access to all fields on these Objects:
Accounts
Contacts
Opportunities
Affinity Connections
Leads
Next, assign the following System Permissions:
Access Activities
API Enabled (this check may not be visible if you’re using the API Profile)
View Setup and Configuration
Edit Tasks
Edit Events
View All Users
View Roles and Role Hierarchy
Modify Email Messages
Download AppExchange Packages - Checking this will enable many other permissions which are all dependent on this, we require these permissions purely to check the version of our app.
Optional: Modify All Data / View All Data (assigning both of these permissions will allow you to skip steps below, but give the user greater access)
11.Optional: Password Never Expires (we recommend enabling this to prevent password expiry and re-authentication)
12.Disable: MFA for Logins (we recommend keeping this disabled to make it easier to authenticate this user)
3. Next, navigate to the Profile you plan to use for this Integration user, we recommend using the standard “Minimum Access - API Only Integrations” profile. Under Field Level Security, make sure this profile has read and edit access to ALL fields for these objects:
Tasks
Events
Email Messages
The final step is to create the Integration User with the following details:
1.
Name: Affinity Integration User
2.Email: Ideally a unique email address that you will be able to sign into when authenticating this integration from Affinity
3.User License: Salesforce Integration (or Salesforce if using a separate profile or System Admin)
4.Profile: Minimum Access - API Only Integrations (or your own custom profile or System Admin)
5. Once the Integration User is created, assign them the Affinity Integration permission set that we created above.
1.Note: Do not use the “Affinity User” Permission set, as this is intended for actual Salesforce users
6. Now that you have the Integration User created with the right permissions, you can use them to authenticate the Affinity Integration in the next setup step.
Was this page helpful?
Assistant
Responses are generated using AI and may contain mistakes.