Salesforce - Permissions
This document covers information on what permissions the Popl integration with Salesforce uses.
Least Privilege
Our integration with Salesforce utilizes Role Based Access Controls (RBAC) which in turn uses the security principle of least privilege. Least privilege means that the enterprise app created by the integration has precisely the amount of privilege that is necessary to perform the and nothing more.
Permissions
The Salesforce integration uses the following permissions:
openid
Access unique user identifiers (openid)
This scope is used with OpenID Connect. It allows access to the user's unique identifier
api
Manage user data via APIs (api)
Grants access to the authenticated user's data via the Salesforce REST and SOAP APIs.
web
Manage user data via Web browsers (web)
Allows the app to use the web-based flow to authenticate the user and access Salesforce with consent, through the UI.
refresh_token
Perform requests at any time (refresh_token)
Allows the app to receive a refresh token to obtain new access tokens.
offline_access
Perform requests at any time (offline_access)
Allows the app to perform background tasks or long-running sessions without requiring re-login.
If any issues or questions, please contact us at [email protected], we are available nearly 24/7 and will get back to you within 6-8 hours or less.
With 🤍 from Popl.
Last updated