Permissions

In this article

    To perform backup and restore operations, Veeam Backup for Salesforce requires the following permissions to be provided.

    Salesforce Users

    Account

    Required Permissions

    Salesforce User

    For Veeam Backup for Salesforce to be able to perform backup and restore operations, the user whose credentials are used to connect to a Salesforce organization must have the following profiles and set of permissions assigned:

    • System Administrator profile — grants broad permissions immediately, but not all required ones.
    • Marketing User profile — required to restore Campaigns and Campaign Membership.
    • Permission set — make sure that the user can view and edit converted leads and has permissions for all record types of the data you plan to restore.
    • Permission set license — any managed application license that is required for accessing the data (for example, HVS, CPQ).

    For sandboxes, any managed application needs to be enabled and license provided to the user. For example, High Velocity Sales requires application activation.

    Salesforce Connected App

    For Veeam Backup for Salesforce to be able to authenticate with Salesforce and get access to resources that will be protected, you must create a Salesforce OAuth Connected App and get the connection tokens. The Connected App must be assigned the following OAuth scopes:

    • Full access (full).
    • Perform requests at any time (refresh_token, offline_access).

    For more information on OAuth scopes in Salesforce, see Salesforce Documentation. To learn how to create the app, see this Veeam KB article.

    Veeam Backup for Salesforce Users

    Account

    Required Permissions

    PostgreSQL Database User

    For Veeam Backup for Salesforce to be able to save Salesforce data to a database, the user whose credentials are used to connect to the database must have permissions to create database schemas and to create databases.

    Minimum set of permissions is to be owner of the following schemes:

    • vsf_configuration
    • salesforce
    • salesforce_metadata

    Note: If you do not grant the user permissions to create databases, you will have to manually create databases on PostgreSQL servers first, and then add databases to Veeam Backup for Salesforce as described in section Adding Databases, before you create any backup policies.