Configuring Salesforce User Permission for SF-NS Custom Integration Real Time Listeners

Integrator.io
, ,
1

Hi all,

We've set up a dedicated service account in Salesforce using a Salesforce Integration License, and the Integrator Distributed Adaptor Package has been installed for all users. The connection from Celigo to this account shows as online/active, but we're still seeing a message indicating the package is not installed and sObjects are not visible.

Given that the connection itself is authenticating successfully, this looks like it may be a permissions gap on the service account rather than a connectivity issue.

Could someone from the community or Celigo team share a recommended permission set / profile configuration for the Salesforce user used with DAP — specifically covering:

  • Required system permissions (e.g., API Enabled, Author Apex)
  • Object and field-level access needed for the package to detect and expose sObjects
  • Any DAP-specific permission set that should be assigned post-installation
  • Known limitations of the Salesforce Integration License with DAP (e.g., object visibility restrictions that differ from a standard/full license)

Any pointers to documentation or a working configuration would be greatly appreciated.

Thanks in advance!

image
image892Ă—590 41.5 KB

2

Hi Hitesh,

Did you get a chance to go over this knowledge base article which might help you - https://docs.celigo.com/hc/en-us/articles/360003567211-FAQ-How-do-I-fix-Integrator-Distributed-Adaptor-package-not-installed-error-for-Salesforce-real-time-exports

3

Hi Laya,

We tried this but didn't work. Customer is not in favor of giving System Admin permission for SF Service Account Integration User.

We are looking for minimum permission set for Getting Started with real time exports.

4

Hi

Can you try this

Online only means OAuth has succeeded for the connection. The real-time export page describes integrator_da__Connection__c as that user. If they cannot see the object, we show “package not installed” and hide sObjects, even when the package is already installed for all users.

The DAP package does not ship a permission set. Integration Users also start with no object access, so profile-based install is not enough. You do not need System Admin, Author Apex, or View/Modify All Data on this user.

Minimum on the Celigo connection user:

  1. Assign theSalesforce API Integrationpermission set license.
  2. Create a permission set withLicense = Salesforce API Integration.
  3. Grant Create / Read / Edit / Delete and Read/Edit FLS on:
  • integrator_da__Connection__c
  • integrator_da__Real_Time_Sync__c
  • integrator_da__Related_SObject_Sync__c
  • integrator_da__Celigo_Queued_Message__c
  1. Grant Read on the sObject you want to export (e.g. Account).
  2. Refresh the sObject list.

Deploy the generated Apex trigger with a normal admin, not this service account.

5

Hi Laya,

Thanks a lot, this worked!
:clap: