Configure user permissions and Connected App

Updated at:

Configure user permissions

You can use Salesforce permission management to assign data and feature access for employees who use WeChat customer service sessions. The package includes a default identity model that is based on Permission Set Groups. It also provides Permission Sets with the appropriate granularity for different functional modules. You can assign a Permission Set Group directly to users or combine the delivered Permission Sets to create custom roles that meet your needs. Additionally, you must manually create a Permission Set to grant users access to the CXG Connected App.

For more information about Permission Set Groups, see Permission Set Groups.

This topic describes how to configure permissions for customer service sessions.

Prerequisites

  1. The package is installed in your Salesforce organization.

  2. Go to Setup > Permission Set Groups and verify that the following two Permission Set Groups have been added to your organization:

    • CXG Admin

    • CXG WeChat Agent

      Note: The License setting for all Permission Sets in these groups is Salesforce. Users with non-Salesforce licenses, such as Chatter External or Service Cloud, cannot be assigned these Permission Sets.

Assign CXG Admin permissions

Assign the CXG Admin Permission Set Group to employees or users who require elevated configuration privileges. This group includes permissions for all CXG custom data and feature configurations.

Procedure

  1. Go to the Salesforce Platform. Click Setup > Users, and then select the employee account that manages the WeChat integration.

  2. Find Permission Set Group Assignments and click Edit Assignments.

  3. In Available Permission Set Groups, select the CXG Admin Permission Set Group.

  4. Click Add > Save.

Assign CXG WeChat Agent permissions

Assign the CXG WeChat Agent Permission Set Group to customer service agents or employees who require view access to CXG-related custom data objects and operational access to the WeChat chat widget.

Procedure

  1. Go to the Salesforce Platform. Click Setup > Users, and then select the employee account that uses the WeChat chat widget.

  2. Find Permission Set Group Assignments and click Edit Assignments.

  3. In Available Permission Set Groups, select the CXG WeChat Agent Permission Set Group.

  4. Click Add > Save.

Grant users Connected App permissions

Permission Sets can include Assigned Connected Apps. However, Permission Sets that contain first-generation package (1GP) Connected Apps cannot be packaged. Therefore, administrators must manually create a Permission Set that grants access to the CXG Connected App and assign it to employees who require this functionality.

Procedure

  1. Go to the Salesforce Platform. Click Setup > Permission Sets > New.

    • Enter a name for the Permission Set in the Label field. We recommend that you use CXG Canvas App Assignment.

    • For License, select None.

  2. Click Save. You are redirected to the Permission Set details page.

  3. Click Assigned Connected App, click Edit, select CXG_CANVAS, and then click Save.

  4. Click Manage Assignment and then click Add Assignment. Select the checkboxes for all users who require Connected App access, including but not limited to the following:

    • Integration User (CXG Automated)

    • CXG Admin

    • CXG WeChat Agent

  5. Save your changes.

Configure Connected App

Note

A Connected App is a framework that allows external applications to integrate with the Salesforce Platform using API calls and standard protocols. For more information, see Connected Apps. We use a Connected App to enable customer service messaging and manage related data objects from CXG. Before you proceed, you must configure OAuth authorization, assign an API integration user, and set up the required Permission Sets for the CXG Connected App.

This topic describes how to configure the Connected App.

Prerequisites

  1. After the package is installed, the Connected App is automatically added to the Salesforce Platform.

  2. An Integration User is created.

  3. All permission-related configurations are complete.

Procedure

  1. Log on to the Salesforce Platform. Go to Setup and use the Quick Find box to search for App Manager.

  2. Find CXG_CANVAS and click Manage in the action column.

  3. Click Edit Policies. In the OAuth Policies section, set Permitted Users to Admin approved users are pre-authorized.

  4. Click Client Credentials Flow > Run As, and then find and select CXG Automated.

  5. Click Save.

Important

Selecting Admin approved users are pre-authorized in OAuth Policies is critical for the security of the CXG Connected App. Do not change this setting after you update it to the admin-approved mode.