I am working in an org where there is a connected app someone created (not me) that has the Run As user (under Client Credentials Flow) which specifies a user with the system administrator profile. I want to change that to an API-only user.

The app that uses the connected app uploads static resources. If I want to change the "run as" user to an API-only user with a profile with minimal access (i.e., only allowing access to upload static resources), what permissions do I need to grant to that profile? I've looked and don't see anything that fits.

  • 2
    Customize Application according to help.salesforce.com/s/…
    – identigral
    Dec 14, 2023 at 22:23
  • 2
    How the heck did I not find that when searching?! Interesting: using duck duck go, that page doesn't come up on the first page of results. Using Google I found help.salesforce.com/s/… as the first result. Blah. Make this an answer, and I'll happily mark it as such.
    – Jeff
    Dec 14, 2023 at 23:11
  • I love duckduckgo for its privacy, but I hate it for its search results. The first page of results are lousy, the second page is irrelevant, and there is no third page. Google may know more about me than I do, but at least I get good search results, lol.
    – sfdcfox
    Dec 15, 2023 at 0:15

1 Answer 1


From the doc:


To create and edit static resources: Customize Application

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .