Salesforce Integration user license and API-only profile

Key Takeaway

Give every integration its own integration user with the Salesforce Integration user license and the "Minimum Access - API Only Integrations" profile. Then add permission sets that grant only what that integration needs.

An integration user is a Salesforce user account that another system, not a person, uses to connect to your org through the API. The Salesforce Integration user license and its Minimum Access - API Only Integrations profile lock that user to API-only access. You then add access in layers so each integration gets only the data and permissions it needs.

One integration user per integration

Salesforce recommends creating one dedicated Salesforce user for every integration, following the principle of least privilege. Giving each calling system, domain, use case, or API resource its own user brings these benefits:

Each user is limited to a unique subset of data and functionality.
Control and traceability of transactions improve.
If one user or integration is compromised, the damage is limited.

Salesforce Accredited Agentforce Financial Services Professional Study Guide

Checklist progressProgress

0/190Learned

Checklist progressProgress

0/190Learned

Based on the final design for a project, perform the necessary steps for the initial Agentforce Financial Services setup

0/8

Based on the final design for a project, provision users and set up user interfaces and permissions

0/8

Given a customer's sharing and security requirements, develop the appropriate Agentforce Financial Services sharing rules to deploy

0/11

Based on the final design for a project, configure the required objects and fields

0/8

Based on the final design for a project, configure all fields needed for integration mapping and configure any integration users

0/7

Choosing an integration option for external financial data

Learn this concept

Dedicated integration users per external system

Learn this concept

Salesforce Integration user license and API-only profile

Learn this concept

Extending integration user access with permission set licenses and permission sets

Learn this concept

Integration user access to Financial Account standard objects

Learn this concept

Integration field mapping for required fields, data types and picklist values

Learn this concept

External ID fields for matching integrated records

Learn this concept

Based on information gathered from the user story, build reports and dashboards based on the defined Success Criteria

0/10

Based on the final design for a project, understand how and when to leverage Salesforce Automation tools

0/13

Based on the final design for a project, configure Actionable Relationship Center (ARC), Householding, and Rollups

0/14

Based on the final design for the project, configure the Lead object, build any queues, and create assignments

0/9

Prepare for the Exam

Play Today's Certle

Study Community

Ask questions and get the latest info from other Salesforce Accredited Agentforce Financial Services Professional studiers.

Go to Discord

Salesforce Integration user license and API-only profile

Key Takeaway

One integration user per integration

Each user is limited to a unique subset of data and functionality.
Control and traceability of transactions improve.
If one user or integration is compromised, the damage is limited.