I want to set up the Zendesk for Salesforce integration, but I'm not able to use the default System Administrator profile. What permissions are required to link these successfully?
There are a few different permissions that are required depending on which integration features you want to use:
- Administrative Permissions > API Enabled
If you don't see the above option within your profiles, reach out to Salesforce Support or check that your SFDC plan includes access to the API. For more information, see the Salesforce community post: "Enable API" not available.
- Administrative Permissions > Modify Metadata Through Metadata API Functions
- Standard Objects Permissions > Push Topics (full access)
is required to use the Account, Contact, or Lead syncing portion of the Data Sync feature, as it relies on the SFDC Streaming API.
- Access to relevant Case fields
This is only required if using the integration's ticket-to-case syncing feature. The relevant fields include all of the fields listed in the Standard field mapping section: Setting up Ticket Sync from Zendesk to Salesforce.
The quickest way to modify these fields is within the profile in Field-level security > Case > (view) to ensure that the profile in question has edit access to the aforementioned fields.
- Access to the Connected app
The article: Setting up user access to Zendesk tickets in Salesforce - mentions setting the and
Allowed Profiles in the Connected App Manager. These settings need to be in place when the integration is connected in Admin Center. They will not retroactively apply if changed after the app is connected.
- Available Push Topics
According to the Salesforce Streaming Limits article, plans are typically capped at either 40, 50, or 100 push topics:
These could be consumed by other integrations or apps. To see how many currently exist, you can execute the following SOQL query (this can be done in the Developer Console or Workbench).
SELECT count() from PushTopic
The Zendesk for Salesforce integration needs to be able to create three of these push topics: one each for Accounts, Contacts, and Leads.
- Visualforce Pages
Although the Lightning component should automatically inherit the permissions of the connected app, visualforce pages will only be authorized for the System Administrator profile until specified otherwise. To control the permissions of these visualforce pages, head into Salesforce > Setup > Custom Code > Visualforce Pages:
From there, make sure the profile(s) in question have access to the visualforce page(s) in question.