Minimal User Permissions in Salesforce

Minimal User Permissions

To create a connection between Smart Flows and Salesforce, a user with sufficient permissions is required to create a handshake between the two applications. If you want to create a specific profile for the purpose of configuring the Smart Flows connector, for example a Minimum Access - Smart Flows profile, add the following permissions to it:

Permission	Why it is required
Modify Metadata Through Metadata API Functions	During connector setup, it is necessary to retrieve the metadata of the objects in your organization, and to deploy the Experlogix Documents button and its list view pages to the page layouts of the selected objects. The same permission is required to remove those components again.
Author Apex	During connector setup, it is necessary to deploy the Apex controller class that supports the Experlogix Documents list view pages, together with its test class.
API Enabled	Smart Flows communicates with Salesforce exclusively through the Salesforce APIs. During authorization, Smart Flows requests the `api` and `refresh_token` OAuth scopes.
Customize Application	During connector setup, it is necessary to modify the page layouts and list views of the selected objects so that they display the Experlogix Documents button.
Modify All Data	During connector setup and post building the data sets, it is necessary to retrieve metadata about the objects in Salesforce, along with their fields and relationships, and to read and write their records.
Send Email	Only required if you want to use the Send email step in your flows.

Object Permissions

The connector user needs at least read access to every object that you want to use in Smart Flows. If access to an object is denied, for example Account, you cannot configure that object or use it in your data sets.

Notes

When you select the permissions above, Salesforce automatically adds the dependent permissions that they require, such as View Setup and Configuration and View All Data.
The connector user is allowed to be an API Only User. This prevents the user from logging in to Salesforce directly.
Some fields are only available when specific permissions are granted. For example, the NumberOfFailedLogins field on User requires the Manage Users permission. See the Salesforce documentation for other fields with similar requirements.