Salesforce
SaaS Management integrates directly with Salesforce, so you can view all user activity within the application. The integration gives you the usage data you need to make informed decisions on inactive licenses and any renewal or purchasing options. For example, you can view when a user last accessed Salesforce to determine if their license is needed.
Integrating with Salesforce
To integrate Salesforce with SaaS Management, you can use an account with the System Administrator profile or create and assign a custom profile with least privilege. Both profiles require the user have a Salesforce license type. The user should not be part of the Customer Portal or Partner Portal. For more information, refer to Salesforce's product documentation.
Note
Before you integrate the applications, make sure you have signed out of your individual account within your organization and are signed in to the appropriate service account with the required permissions.
- From the SaaS Management navigation menu, select Integrations.
- Select the Salesforce tile.
- Select Add Integration.
- On the Salesforce login page, enter your credentials and select Log In.
-
Review the requested permissions. To report on your license utilization, SaaS Management asks to:
- Access basic information, such as your name, email, and Salesforce information.
- Access and manage your user data. SaaS Management reads all your users and their login history to provide data on your license utilization.
- Perform requests on your behalf at any time. SaaS Management makes background API requests on your behalf to fetch your data nightly
-
Select Allow to accept the requested permissions and complete the integration.
SaaS Management will begin syncing your Salesforce instantly.
Note
Due to a Salesforce limitation, SaaS Management can only pull the last six months of your usage data. However, after we start retrieving data, we will continuously fetch data every night ensuring a historical snapshot.
Setting Permissions for a Custom Profile with Least Privilege
You can create and assign a profile with the least privilege by creating a custom profile with the following settings:
System Permissions
| Create and Customize List View | Create and Set Up Experiences |
| Create Libraries | Create Topics |
| Customize Application | Edit Events |
| Update Consent Preferences Using REST API | Lightning Console User |
| Lightning Experience User | Lightning Login User |
| Manage All Private Reports and Dashboards | Manage Certificates |
| Manage Connected Apps | Manage Custom Permissions |
| Manage Lightning Sync | Manage Mobile Configurations |
| Manage Multi-Factor Authentication in User Interface | View All Data |
| View Event Log Files | View Help Link |
| View Real-Time Event Monitoring Data | View Roles and Role Hierarchy |
| View Setup and Configuration | View User Records with PII |
User Permissions
| Assign Permission Sets | Manage Internal Users |
| Manage IP Addresses | Manage Login Access Policies |
| Manage Password Policies | Manage Profiles and Permissions Sets |
| Manage Roles | Manage Sharing |
| Manage Users | Reset User Passwords and Unlock Users |
| View All Profiles | View All Users |
Object Settings
For a complete list of object permissions, refer to Salesforce Integration - Object Settings.
App Permissions
| Category | Permission Name |
|---|---|
| Call Center | Manage Macros Users Can't Undo |
| Knowledge Management | Allow View Knowledge |
| Knowledge Management | Knowledge One |
| Sales | Edit Opportunity Product Sales Price |
| Sales | Send Stay-in-Touch Requests |