What permissions does the sf app need for salesforce connector?

Thinking completed Depending on whether you are configuring Salesforce as a Source or as a Destination, the required OAuth scopes and user permissions differ: 1. Salesforce Source Connector OAuth Scopes In the connector's OAuth specification, the following scopes are configured for authentication [GitHub source spec]: •

api

•

web

•

refresh_token

•

lightning

(Note: If setting up a new bring-your-own-app integration on newer Salesforce releases, Salesforce directs inbound integrations to External Client Apps rather than new Connected Apps [GitHub PR].) Dedicated User & Object Permissions For the Salesforce user account authenticating the connection: • Object Permissions: Grant Read access on any objects you want Airbyte to sync (e.g., Accounts, Contacts, Opportunities) [Salesforce Source Setup]. • System Permissions: ◦ If API Access Control is enabled in your org, enable Use Any API Client [Salesforce Source Setup]. ◦ If API Access Control is not enabled, enable Approve Uninstalled Connected Apps [Salesforce Source Setup]. • Permissions for Security/Permissions Data (Optional): If syncing security objects (such as

User

), the user requires the View All Users permission as well as standard read permissions for those objects [Salesforce Source Docs]. 2. Salesforce Destination Connector Connected App OAuth Scopes When setting up the Connected App for the destination connector, add the following OAuth scopes [Salesforce Destination Setup]: • Full access (full) • Perform requests on your behalf at any time (refresh_token, offline_access) Dedicated User & Object Permissions • Grant write permissions via a Permission Set under Object Permissions (such as Create/Edit) for each object you intend to load data into (e.g., Accounts, Contacts, Opportunities) [Salesforce Destination Setup]. 👍 0 button 👎 0 button ℹ️ Tip: Mention @kapa.ai in the thread for follow-ups or DM the app for 1-to-1 help.

@kapa.ai what's the callback url I need to input to ccreate that app>?

Thinking completed The callback URL depends on whether you are using Airbyte Cloud or a self-managed instance of Airbyte: • Airbyte Cloud:

https://cloud.airbyte.com/auth/callback

[Salesforce Destination Setup] • Self-Managed Airbyte:

https://your-airbyte-domain.com/auth/callback

(replacing

your-airbyte-domain.com

with your actual instance domain or host) [Salesforce Destination Setup] 👍 0 button 👎 0 button ℹ️ Tip: Mention @kapa.ai in the thread for follow-ups or DM the app for 1-to-1 help.

@kapa.ai I'm reading from salesoforce, what are the oauth scope needed?

Thinking completed When reading from Salesforce using the

source-salesforce

connector, the following OAuth scopes are specified for the OAuth flow [source spec]: •

api

(Manage user data via APIs) •

web

(Manage user data via Web browsers) •

refresh_token

(Perform requests at any time / offline access) •

lightning

(Provide access to Lightning applications) 👍 0 button 👎 0 button ℹ️ Tip: Mention @kapa.ai in the thread for follow-ups or DM the app for 1-to-1 help.