Best Practices: Salesforce Permissions

Integration Setup Permissions

The following permissions are required to set up the Salesforce integration:

• In Salesforce, you must be a System Admin to install and configure the Demandbase ABM AppExchange application for Salesforce.
• In Demandbase, you must be an Admin user to connect Demandbase and Salesforce.

Salesforce Permissions

The following Salesforce permissions are needed to customize the user created for syncing Demandbase and Salesforce. See the Salesforce documentation for setting these permissions starting on this page: Share Objects and Fields.

Important: 

• Once you have the correct permissions, you'll need to get a Consumer Key and Secret to log in (authenticate) to Salesforce. See Step 2: Obtain Salesforce Credentials.
• As a best practice, we highly recommend that you create a dedicated Salesforce API user that Demandbase can use to synchronize with Salesforce via the Salesforce API. This practice makes it easier to update if the dedicated Salesforce user is an employee who leaves or changes roles. See the Salesforce documentation for how to Create a Secure Salesforce API User.

Recommended Permissions

Read Access:

• Accounts
  • Campaigns and Campaign Members
• Contacts
• Leads
• Activities (Events and Tasks)
• Users - To show lead owner information (owner name on account or lead).
• Queues - Same as users, leads can be assigned to queues too.
• Opportunities - We use Opportunities for two different reasons:
  • To create our Program Impact Report (we tie campaign membership to sales cycle results such as the # of accounts that reached success in the campaign).
  • To allow you to group or filter by Open Opportunity Status (for example, show me every open opportunity).
• Reports - System Permission to Run Reports, as well as "View Reports in Public Folders".
• Quick Note on Roles / Hierarchy: You need to ensure our integration user can see the Accounts, Contacts, Leads, Opportunities, etc. that encompass the records you will use Demandbase with.

Write/Edit Access:

• Accounts
• Contacts
• Leads
• Tasks (for Activity Logging)

User Settings:

The user needs to have the Marketing User checkbox checked in order to use the Salesforce Actions for Campaign Members.

Bare Minimum Permissions

Read Access:

• Accounts
• Campaigns and Campaign Members
• Contacts
• Leads

Write/Edit Access:

• Accounts
• Contacts
• Leads