Documentation

Looking for something in particular?

Granting Org Permissions to Provar Automation

The purpose of this article is to explain what permissions you need to grant for Provar Automation to access your Salesforce org(s), why you need to grant them, and how you can flexibly manage this using a Permission Set so that you can maintain this from a single point within your Salesforce setup.

Note that in most cases, you can use an existing System Admin profile to provision the appropriate permissions. If this is impossible for your org, follow the steps below to assign these permissions in a Permission Set.

For Provar Automation to automatically understand your Salesforce Org configuration, you need to connect Provar to your org with extended privileges. Provar Automation automatically recognizes your Salesforce metadata, including page layouts, Flexipages, custom buttons, links, actions, fields, Visualforce pages, Lightning components, and more. In Provar Automation, we call this the Metadata Cache. Once downloaded, you can automatically synchronize any changes made as part of an application deployment each time you run your regression tests.

Creating a Provar Automation Permission Set

To handle the provisioning of permissions to Provar Automation, we recommend creating a Salesforce Permission Set, which can be assigned to the admin user used for testing with Provar Automation. Note that this permission set only needs to be granted to Salesforce Connection users requiring admin-level access and should not be applied to users where you use the Log-On As Connection functionality to test as a specific user/profile. Refer to Adding a Connection for more information on the different types of Salesforce Connections that Provar uses. Follow the steps below to create your Permission Set.

Create a New Permission Set


As a System Administrator, go into Setup, select the Permission Sets menu item, and click the New button:

Complete the new form. We suggest a name of Provar Metadata but this can be changed to whatever naming standard is preferred.

Add Mandatory Permissions


Select the following permissions and add them to the Permission Set created above.

  • Modify All Data
  • API Enabled
  • Modify Metadata (Beta) – We recommend adding this now to be in place for the future. Refer to the FAQ section below for more information.

Select each property to add to the permission set and click the Edit button to activate the corresponding checkboxes. Note that checking Modify All Data will automatically check the Modify Metadata (Beta) permission and any other dependencies.

Remember to click the Save button to complete the action.

Optional Permissions


You may want to add permissions to this Permission Set based on your specific org implementation and test scenarios. Feel free to include any additional permissions required that you are aware of that are not automatically included in the profile of the user used in your Provar Automation Metadata connection. These may include Access Libraries, Lightning Console, Mass Email local custom fields, and specific record types.

Below are some additional suggestions for commonly added permissions. Note that these are only required if you use or test these features in your Salesforce instance. Repeat the steps above to add them to your Provar Automation Metadata Permission Set as required:

  • Allow Access to Customized Actions if using Custom Actions and Chatter-based profiles
  • View Data Categories in Setup if testing Salesforce Knowledge; this also exposes the Categories in the API
  • Lightning Experience User if testing with the Lightning UI theme and not already granted by default to your user(s)

Assign a Permission Set 


The final step is to assign your Permission Set. To do this, simply click the Manage Assignments button from the Permission Set page and then click the Add Assignment button. Select the primary user(s) needed for connecting from Provar Automation and accessing metadata, then click the Assign button.

You can remove the Permission Set from a single user from the corresponding user’s profile page or multiple users from the Manage Assignments page.

FAQ


Do these enhanced permissions give you access to our org in addition to giving Provar Automation access?

No, we only have access if you provide us access. The connection is exclusively for creating, maintaining, and executing test cases. We only have access to your orgs if you share login details with us or export a Provar Automation project and share it with us for customer support. This is true regardless of whether or not you use the Permission Set.

If I use a System Admin profile for my Provar Automation metadata user, do I still need to grant this Permission Set?

No, the System Admin profile has more permissions than granted by this Permission Set. However, you may need to add the optional permissions, such as for Lightning Experience User. See Step 3 above for more information.

Why do I have to grant Modify All Data? Isn’t the Modify Metadata permission sufficient?

The Modify Metadata permission is only a Beta feature and not complete without Modify All Data. (Refer to Modify Metadata Permission (Beta) for more information). We are working with the appropriate Salesforce Product Managers and other Salesforce Tool ISVs to ensure this provides the required level of access. In the future, we anticipate that Modify All Data may no longer be required, though it would remain helpful for complex test cases.

I’ve created and applied the Permission Set, but saw the message “The connection test failed: Sorry, your administrator has blocked access to the client.”

Your Salesforce administrator may have disabled access to 3rd party applications. Please refer to Solving Administrator has Blocked Access to Client Errors for more information.


Feedback

Was this article helpful for you?
Documentation library

Trying to raise a case with our support team?

We use cookies to better understand how our website is used so we can tailor content for you. For more information about the different cookies we use please take a look at our Privacy Policy.

Scroll to Top