--- title: Permissions Needed to Integrate Salesforce description: This article outlines the specific permissions (scopes) Accord requires to connect to Salesforce and what each does. --- [Skip to content](https://collaboration.inaccord.com/knowledge/permissions-needed-to-integrate-salesforce#main-content) [![Accord logo](https://collaboration.inaccord.com/hubfs/Hubspot%20KB%20Logo.svg)](https://inaccord.com) Open main navigation Close main navigation How can we help? - There are no suggestions because the search field is empty. 1. [Knowledge Base](https://collaboration.inaccord.com/knowledge?hsLang=en) 2. [Salesforce Integration](https://collaboration.inaccord.com/knowledge/salesforce-integration?hsLang=en) # Permissions Needed to Integrate Salesforce ## This article outlines the specific permissions (scopes) Accord requires to connect to Salesforce and what each does. ### Key Takeaways  *Accord requires the following scopes* - Access the identity URL service (id, profile, email, address, phone) - Manage user data via APIs (api) - Manage user data via Web browsers (web) - Perform requests at any time (refresh\_token, offline\_access) ### Overview  When authorizing Accord to connect with your Salesforce instance, you'll be presented with a list of permissions, also known as **scopes**.  We have done our best to limit the amount of scopes and only require the bare minimum. Each scope is described below.  **Note**: these scopes should be turned on by default for most Salesforce users. ### **Instance Wide Connection vs. Individual Connection ** #### **Instance Wide Connection (Connection Owner)** When establishing the initial connection between Accord and Salesforce, you will set the Instance-wide connection, called the **Connection Owner**. This connection is set at the CRM Settings page – Settings \> Workspace \> CRM, and can be modified at any time.  This is the main account Accord will use to sync data between Accord and Salesforce. We *highly* recommend using a Salesforce user that has the System Administrator role.   ![Screenshot 2026-03-19 at 1.44.17 PM-1](https://collaboration.inaccord.com/hs-fs/hubfs/Screenshot%202026-03-19%20at%201.44.17%20PM-1.png?width=670&height=152&name=Screenshot%202026-03-19%20at%201.44.17%20PM-1.png) *UI to control the Instance-wide connection owner (CRM Settings page – Settings \> Workspace \> CRM)* #### **Individual Connection** Each Accord user also has their own connection between Accord and Salesforce. This connection is per-user, and is set in the user profile setting page – Settings \> Personal \> Profile.   Having a user enable these settings allows Accord to leverage this connection to make updates to Accord. For example, if a user modifies a Salesforce field that has been embedded into Accord, Accord will use this user's Salesforce account to make the connection. **This allows you to preserve the permissions you have set for each of your Salesforce users and create an audit log of changes made.** ### **Scopes** **Access the identity URL service (id, profile, email, address, phone)** - **What it does:** This scope grants Accord access to basic information about your Salesforce users, including their unique user ID, profile details, email address, etc. #### **Manage user data via APIs (api)** - **What it does:** This core scope allows Accord to interact with Salesforce data programmatically using Salesforce APIs.  #### **Manage user data via Web browsers (web)** - **What it does:** This scope enables Accord to interact with Salesforce data when a user is actively logged into a web browser.  #### **Perform requests at any time (refresh\_token, offline\_access)** - **What it does:** A refresh token allows Accord to obtain new access tokens without requiring the user to explicitly re-auth the application each time the initial access token expires.  **Reference:** For more detailed information about OAuth scopes in Salesforce, you can refer to the official [Salesforce documentation](https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_oauth_tokens_scopes.htm&type=5) - [Getting Started for Admins](https://collaboration.inaccord.com/knowledge/getting-started-for-admins?hsLang=en#main-content) - [Administration](https://collaboration.inaccord.com/knowledge/getting-started-for-admins?hsLang=en#administration) - [Getting Started for Users](https://collaboration.inaccord.com/knowledge/getting-started-for-users?hsLang=en#main-content) - [Best Practices](https://collaboration.inaccord.com/knowledge/getting-started-for-users?hsLang=en#best-practices) - [Playbook Building](https://collaboration.inaccord.com/knowledge/playbook-building?hsLang=en) - [Accord Pages Overview](https://collaboration.inaccord.com/knowledge/accord-pages-overview?hsLang=en) - [Salesforce Integration](https://collaboration.inaccord.com/knowledge/salesforce-integration?hsLang=en) - [HubSpot Integration](https://collaboration.inaccord.com/knowledge/hubspot-integration?hsLang=en) - [Integrations](https://collaboration.inaccord.com/knowledge/integrations?hsLang=en) - [Resource Library (CMS)](https://collaboration.inaccord.com/knowledge/resource-library-cms?hsLang=en) - [Accord Intelligence](https://collaboration.inaccord.com/knowledge/accord-intelligence?hsLang=en#main-content) - [Accord Agents](https://collaboration.inaccord.com/knowledge/accord-intelligence?hsLang=en#accord-agents) - [Reporting](https://collaboration.inaccord.com/knowledge/reporting?hsLang=en) - [Troubleshooting](https://collaboration.inaccord.com/knowledge/troubleshooting?hsLang=en) - [Single Sign-On (SSO)](https://collaboration.inaccord.com/knowledge/single-sign-on-sso?hsLang=en) - [Deal Reviews](https://collaboration.inaccord.com/knowledge/deal-reviews?hsLang=en) - [Miscellaneous](https://collaboration.inaccord.com/knowledge/miscellaneous?hsLang=en) [![3ffd500e-b255-4f54-aca9-eb7961c6ceaa](https://collaboration.inaccord.com/hs-fs/hubfs/3ffd500e-b255-4f54-aca9-eb7961c6ceaa.png?width=100&height=27&name=3ffd500e-b255-4f54-aca9-eb7961c6ceaa.png "3ffd500e-b255-4f54-aca9-eb7961c6ceaa")](https://inaccord.com/) Knowledge Base Copyright © 2025, Accord