This article explains how to create a dedicated Salesforce user account and configure the permissions Keepit needs to back up and restore your data.

Before you begin

Make sure you have a System Administrator profile in Salesforce.

Supported Salesforce editions

The following Salesforce editions support API access, which Keepit requires to back up and restore data and metadata:

• Professional Edition (with API access enabled)
• Enterprise Edition
• Unlimited Edition
• Performance Edition
• Einstein 1
• Developer Edition

Choose a setup option

Keepit supports two ways to set up the Salesforce user account: using the default System Administrator profile or using a custom profile.

In Salesforce, a user's permissions are the sum of their profile permissions plus any assigned permission sets. The System Administrator profile already includes some of the permissions Keepit needs, so you don't need to add those manually to the permission set. With a custom profile, you assign those same permissions explicitly through the permission set instead.

Option 1: Set up a user with the default System Administrator profile

Step 1: Create a user

1. In Salesforce, go to Setup > Users > New User.

2. Enter a name, email address, and a unique username. For example: Keepit.

3. Assign a Salesforce user license.

4. Assign the System Administrator profile.

5. Select Save. Salesforce sends a password setup email to the new user's address.

6. Set a password for the user.

Step 2: Create a permission set and assign it to the user

1. In Salesforce, go to Setup > Permission Sets > New.

2. Enter a label. For example: Backup and Restore.

3. Select Save.

4. Enable the following permissions:

5. Assign the permission set to the user you created in Step 1.

Option 2: Set up a user with a custom profile

Step 1: Create a custom profile

1. In Salesforce, go to Setup > Profiles > New.

2. Select Standard User for the existing profile.

3. Enter a profile name. For example: Keepit User.

4. Go to Setup > Profiles > Keepit User > Edit.

5. Under Administrative Permissions, enable Modify All Data.

6. Select Save.

Step 2: Create a user and assign the custom profile

1. In Salesforce, go to Setup > Users > New User.

2. Enter a name, email address, and a unique username. For example: Keepit.

3. Assign a Salesforce user license.

4. Assign the Keepit User profile.

5. Select Save. Salesforce sends a password setup email to the new user's address.

6. Set a password for the user.

Step 3: Create a permission set and assign it to the user

1. In Salesforce, go to Setup > Permission Sets > New.

2. Enter a label. For example: Backup and Restore.

3. Select Save.

4. Enable the following permissions:

5. Select Manage Assignments > Add Assignments, then select the user you created in Step 2.

Login restrictions and password policies

Salesforce allows you to restrict user logins based on login hours and IP address ranges. Don't apply login hour restrictions to the profile used for the Keepit integration.

Salesforce also supports IP restrictions at the org level and the profile level. If IP restrictions are enabled, add the public IP addresses used by Keepit to the allowed IP list. For more information, see public IP ranges per data center, and include the IP addresses used for the SIEM integration.

Salesforce lets administrators define password policies at the profile level. Set the password policy for the Keepit integration profile to Never expires to ensure uninterrupted backups and restores.

Next steps

Once you've set up the Salesforce user, you're ready to install the managed package and create the connector.