Best Practices: Salesforce Permissions

Prerequisites

The following permissions are required to set up the Salesforce integration:

• In Salesforce, you must be an Admin to install and configure the Demandbase ABM AppExchange application for Salesforce.
• In Demandbase, you must be an Admin user to connect Demandbase and Salesforce.

Salesforce Permissions

The following Salesforce permissions are needed to customize the user created for syncing Demandbase and Salesforce. See the Salesforce documentation for setting these permissions starting on this page: Share Objects and Fields.

Important: 

• Once you have the correct permissions, you'll need to get a Consumer Key and Secret to log in (authenticate) to Salesforce. See Step 2: Obtain Salesforce Credentials.
• As a best practice, we highly recommend that you create a dedicated Salesforce API user that Demandbase can use to synchronize with Salesforce via the Salesforce API. This allows you to more easily update permissions than using a user that is an employee who might leave the company or change roles. See the Salesforce documentation for how to Create a Secure Salesforce API User.

Recommended Permissions

Read Access:

• Accounts
• Campaigns and Campaign Members
• Contacts
• Leads
• Activities (Events and Tasks)
• Users - To show record owner information. 
• Queues - Same as users, leads can be assigned to queues too.
• Opportunities - We use Opportunities for below two functions.
  • To create our Program Impact Report (we tie campaign membership to sales cycle results such as the # of accounts that reached success in the campaign).
  • To allow you to group or filter by Open Opportunity Status (for example, show me every open opportunity).
• Reports
  • Run Reports
  • View Reports in Public Folders

Write/Edit Access:

• Accounts
• Campaigns and Campaign Members (if using Orchestration) 
  • The user needs to have the Marketing User checkbox checked. 
• Contacts
• Leads
• Tasks (for Activity Logging)

Bare Minimum Permissions

Read Access:

• Accounts
• Campaigns and Campaign Members
• Contacts
• Leads

Write/Edit Access:

• Accounts
• Contacts
• Leads