Salesforce Account and User Permissions

Verify that you can access the Salesforce account and that you have the required Salesforce user permissions.

Account Access Requirements

You must have an admin user account that can connect to Salesforce.

Note

Best practices: To ensure that all data is backed up and restored, create an app for one Salesforce user account that has a System Administrator profile or an equivalent profile.

If you create a new user for backup and restore operations, verify that the new user exists in both production and sandbox environments. Additionally, verify that the new user's Community Nickname is the same in all environments.

It is recommended to create a permission set with the Query All Files permission and assign it to the user performing the backup and restore operations. You can also clone the standard System Administrator profile, assign it to the user, and then enable the Query All Files permission.

User Permission Requirements

Permissions for Backups

The Salesforce users who perform the backup operations must have the correct permissions set in their Salesforce user profiles.

Data to back up	Required permissions
Organization	System Administrator profile or an equivalent profile At least Read permission for all standard fields and custom fields.
Salesforce CRM Content	Query All files
Private Chatter messages and direct messages	Manage Chatter Messages and Direct Messages
Knowledge articles	The user who is configured to perform backups needs access to the knowledge objects. The user must have an active Knowledge User license to back up knowledge objects.
Encrypted Salesforce data	View Encrypted Data Note If you perform a backup without the View Encrypted Data permission, the masked data is backed up.
Metadata	Download AppExchange Packages Modify Metadata Through API Functions
TenantSecret (if Salesforce Shield is enabled)	Manage Encryption Key

Note

Additional permissions may be required to perform backup operations on objects that require specific feature licenses.

Permissions for Restores

The Salesforce users who perform certain types of restore operations must have the correct permissions set in their Salesforce user profiles.

Data to restore	Required permissions
The Full Salesforce Sandbox Salesforce Data to Salesforce	System Administrator profile or an equivalent profile Read/write/modify access to the objects involved
Salesforce Metadata to Salesforce	System Administrator profile or an equivalent profile
Encrypted Salesforce data	View Encrypted Data Note Certain types of restores, such as single-record restores, contain encrypted data.