3

Using just the Integration profile doesn't allow access to standard objects so it is advised to create a Permission Set (a.k.a PS) to allow CRUD access to standard objects like Accounts, Contacts, or Leads. See here and here.

It is also advised to not select a License when creating the PS, which I did.

But after configuring the PS and upon assigning it to the user, I get the following error:

Failure : Can't assign ABC permission set to XYZ user. The user license doesn't allow the permission: Read Lead

OR

Failure : Can't assign ABC permission set to XYZ user. The user license doesn't allow the permission: Create Contact

OR

Failure : Can't assign ABC permission set to XYZ user. The user license doesn't allow the permission: Delete Contact

I'm not sure how to fix this issue and it is not pointed out anywhere.

Improve this question

2 Answers 2

Reset to default
13

The issue is having the License field blank. If License is blank the user cannot be assigned to the PS.

To choose the correct license, if license is selected as Salesforce Integration under User Licenses category, this will still not work. The issue here is that standard objects will not be available in the PS to choose.

So the only way to achieve it is to make sure to select Salesforce API Integration under Permission Set Licenses. This will show the std objects AND will allow the PS to be assigned to an integration user.

So do NOT choose Salesforce Integration under User Licenses category: enter image description here

Instead, choose the Salesforce API Integration under Permission Set Licenses: enter image description here

Improve this answer
4
  • 1
    Why shouldn't Salesforce Integration be chosen? I created a PS with Salesforce API Integration as the license type, but then I found I couldn't give permission to custom objects, which means it's not suitable for what I want this user to do. I created one with Salesforce Integration and it only allowed access to custom objects.
    – paulmorriss
    Commented May 12, 2023 at 11:11
  • That is odd but it is expected in some cases. So for some integrations, depending on type of access, you may need both permission sets created and assigned to the integration user. Combination of both PS will give you all the required access.
    – payamf1
    Commented May 22, 2023 at 13:48
  • 1
    My God! Such a minor thing, and I wasted hours trying to find out what the issue was. Thank you so much!!
    – Afraz Hussain
    Commented Jul 1, 2023 at 11:42
  • You save my day, i was going crazy !
    – Yann Gorvel
    Commented Nov 24, 2023 at 14:37
2

Assign 'Salesforce API Integration' permission to integration user from Permission Set License Assignments.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .