Salesforce permission requirements

The integration user's Salesforce permissions determine what Afi can read during backup and write during recovery. Afi administrator roles determine who can access backups and run tasks in the Afi portal.

Connection and backup

Salesforce permission	Purpose
Download AppExchange Packages	Installation of the Afi managed package.
Customize Application	Adding afi.ai to Trusted URLs (formerly CSP Trusted Sites). The wizard calls this Update trusted CSP sites.
API Enabled	Access to Salesforce APIs.
View All Data	Access to all records, regardless of sharing settings.
Query All Files	Visibility of all files, including those in nonmember libraries and unlisted groups that View All Data alone doesn't cover. The integration user also needs access to file contents.
View Setup and Configuration	Access to configuration details, such as profiles and permission sets.
Modify Metadata Through Metadata API Functions	Reading object definitions through the Metadata API requires this permission or Modify All Data.

Backup coverage also depends on available objects, visible fields, and enabled Salesforce features. See What's supported for details.

Recovery

The integration user in the recovery destination also needs Modify All Data and Edit Read Only Fields to create and update records.

Additional permissions

The onboarding wizard marks these permissions as optional because they apply to specific data or recovery options. For example, Disable Salesforce automation during recovery requires permission to manage flows.

Data or scenario	Salesforce permission or capability
Unmasked values of encrypted custom fields (Classic Encryption)	View Encrypted Data. Without it, Salesforce can return masked values.
User information concealed by Enhanced Personal Information Management	View Concealed Field Data.
Converted Leads and non-draft email messages	View and Edit Converted Leads and Update Email Messages, respectively.
Deactivating flows during recovery	Manage Flow and Enable System Mode Flow Activation. See Salesforce's flow permission settings and automation during recovery before changing the default recovery options.
Original audit values (such as Created Date and Created By) and inactive record owners	Set Audit Fields upon Record Creation and Update Records with Inactive Owners. The corresponding organization-level Salesforce settings must also be enabled.
Salesforce Knowledge and Campaign data	Knowledge User and Marketing User feature licenses, respectively.
Managing Salesforce users and permission assignments	Manage Internal Users, Manage Profiles and Permission Sets, and Assign Permission Sets. Afi checks these permissions, but User and PermissionSet records are currently read-only during recovery.