Permissions required for connected user?

[jillifoss]

We're trying to switch our connected user to a new user assigned one of the new Integration Only profiles. We've added the 2 "Connected-User-ONLY" permission sets listed in this article, as well as a permission set with CRUD (and view all and modify all) access to Accounts, Contacts, Opportunities, Campaigns, and Campaign Members - including edit access to all fields on each object.

However, when trying to connect to Salesforce via that user, we receive the error: "You do not have the level of access necessary to perform the operation you requested. Please contact the owner of the record or your administrator if access is necessary. For more information, see Insufficient Privileges Errors."

It seems that a user needs more permissions that what are outlined in that article - would you please provide some guidance?

I did switch the connection back to my user record for now. Org ID 00D1I0000003SD0, access granted.

Thank you.

[CnP.Support.AM]

Good day @jillifoss

We reviewed the "Salesforce API Only System Integrations" profile and noticed that it doesn't have Standard Object Permissions and Class Library permissions in the profile which are required to communicate with CONNECT. Please use the profile which has the above-mentioned permissions so that it works for the integration.

[jillifoss]

Hi there,

My apologies, I'm still confused. The help article lists the following requirements for the connected user: "The Connected User's Profile needs to be able to create, read, and update Accounts, Contacts, Opportunities, Campaigns, and Campaign Members, and the User must have the following permission sets :

• PS-CnP-PaaS-Connected-User-ONLY
• PS-CnP-Event-Connected-User-ONLY"

The user we set up has both permission sets, and a permission set we created with create/read/update access to Accounts, Opportunities, Campaigns, and Campaign Members (as required). The user has the standard object permissions and class library permissions (based on what was outlined in the article), so I'm confused what other permissions they need. Please advise.

[CnP.Support.AM]

Good day @jillifoss

One of our developers reviewed your instance and assigned the Class Library permission set to the user. Would you please try to establish the connection with that user now and let us know if that doesn't work?

[jillifoss]

Thank you.

I tried establishing the connection with that user, and received the same error. I suspect that C&P needs to make some adjustments that will allow customers to use the free integration licenses for their C&P user too?

Thanks again.

[jillifoss]

Update: this is now an URGENT issue. I tried to connect to Salesforce using my Salesforce credentials, and received the message in Connect:
"Sorry but we are unable to establish connection to your Salesforce instance. This may be due to a number of factors such as an out-date installation or missing components. Please grant Click & Pledge support access to your Salesforce account and contact support for review of your instance. Read more..."

It was connected via my credentials previously with no problem. Please advise ASAP!

[CnP.Support.AM]

Good day @jillifoss

Would you please try to establish the connection now with your user and let us know if that works?

[jillifoss]

Strange - I tried again, it popped up the Salesforce allow access screen, I clicked Allow, then received the same error in Connect as in my last post.

[CnP.Support.AM]

jillifoss

Would you please try with both of the users and let us know if it works?

[jillifoss]

Integration user still had the first issue:
And my user had the second issue:

[CnP.Support.AM]

Would you please create a user for us with the integration user profile so that we can check the integration? set the email to: [email protected]

[jillifoss]

Hi there, I added a user with that email (and username [email protected].2). However, the integration users aren't really able to log in..

[CnP.Support]

jilliann

May I ask that you try this again?

Your account is now connected.

[jillifoss]

Thank you. Can you please advise why the integration user didn't work initially? I will be setting this up for other customers.

Also, I'd like to adjust the email address for the integration user so it's linked to an email they have access to - can I just switch to using the integration user originally set up, or will I need to rely on you to click the link in the email that gets sent confirming the change in email for a Salesforce user?

[CnP.Support]

jillifoss

There was an issue in the login portal that was resolved.

An update was made early this morning, as we are getting ready for final testing of Click & Pay and it created an issue with new fields. Sorry for the trouble & inconvenience.

The problem was it was working with our TEST instances but not in production so it was not detected.

Keep us posted & again sorry for the inconvenience. We are trying to release Click & Pay in June.. all hands are on keyboard