Creating a Salesforce user role

Note:This enhancement is available with SaaS Management.

The Salesforce Standard User or System Administrator user role permissions are required to set up integrations for all your Salesforce orgs with Flexera’s SaaS Management. The following tutorial explains how to set up the Salesforce Standard User and Systems Administrator user roles and ensure the users assigned to these roles have the correct minimum permissions based on the Salesforce scopes required and Salesforce user role.

The following Salesforce scopes required table explains the scope of responsibilities the user needs to enable Flexera SaaS Management integration tasks with Salesforce.

Salesforce scopes required

Scopes Required	Description	Integration Task Name
Access your basic information	To read user details	Application Roster
Access and manage your data (API)	Access and manage your data	Application Roster Application Access License Information Reclamation
Perform requests on your behalf at any time (refresh_token, offline_access)	To make an authenticated API call	Required for Authentication

Salesforce user role

To grant the above scopes required permissions and to authorize access to the OAuth client application configured in Flexera’s SaaS Management integration with Salesforce, the user must have the following user role permissions.

User Role	Description
Standard User	If you only enable the Application Roster, Application Access, and License Information tasks, then the Standard User permissions are required.
System Administrator	If you enable the Reclamation task, along with the Application Roster and Application Access tasks, then the System Administrator permissions are required. To reclaim a license, the user requires Manage User permissions. In the Standard User profiles available in Salesforce, only the System Administrator has these permissions. For more details, refer to the Salesforce Standard Profiles.

Note:If you do not wish to use the System Administrator user role, refer to the Salesforce instructions in Create a Secure Salesforce API User to create a custom profile with API Enabled and Manage User permissions.

The following instructions explain how to assign the Salesforce Standard User or System Administrator role to a user.

To assign the Salesforce Standard User or System Administrator role to a user:

Important:This Salesforce user role information is subject to change as enhancements are made to Salesforce.

Note:To assign these Standard User or System Administrator roles to a user, the Salesforce account must have at least 1 Salesforce User license available/ remaining.

1.

In Salesforce, navigate to Setup -> Administration -> Users -> Users.

2.

Is the user a new user or an existing user?

a.

For a new user, click New User.

b.

For an existing user, click edit on the selected user.

3.

In the User License dropdown, select Salesforce as the license type.

4.

In the Profile dropdown, select the appropriate user role.

a.

Select Standard User to assign users the SaaS Management tasks: Application Roster, Application Access, and License Information.

b.

Select System Administrator to assign users the SaaS Management tasks: Application Roster, Application Access, License Information, and Reclamation.

5.

Click Save to create or update the selected user.