---
title: "Connecting Salesforce Without Admin Privileges"
slug: "connecting-salesforce-without-admin-privileges"
updated: 2026-06-18T11:24:56Z
published: 2026-06-18T11:24:56Z
canonical: "help.madkudu.com/connecting-salesforce-without-admin-privileges"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.madkudu.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Connecting Salesforce Without Admin Privileges

A user without admin rights cannot authorize the application until it has been installed and approved by an admin. Please have a Salesforce admin carry out these one-time procedures.

> This article serves a specific purpose. If your integration user possesses Salesforce admin privileges, you can follow the instructions provided here instead.

### **Step 1 — Install / approve the app**

[](https://gist.github.com/muellerhginsights/3ac409ecf173eee77e3711bfe0fae3c1#step-1--install--approve-the-app)

1. A Salesforce **admin** initiates the connect once (this registers **HG RGI Platform** in your org), **or** locates it under Setup → **Connected Apps OAuth Usage**.
2. Setup → **Connected Apps OAuth Usage** → find **HG RGI Platform** → click **Install**.
3. **After installing, you may also need to Unblock the app.** On that same *Connected Apps OAuth Usage* row, check the **Unblock** action:
  - If **Unblock** is **available**, click it to approve/allowlist the app.
  - If **Unblock** is **greyed out**, the app isn't approved yet — confirm the Install step completed; installing is what enables approval.
  - This is most relevant when **API Access Control** is enabled, where apps are blocked by default until explicitly installed *and* unblocked.

### **Step 2 — Set Permitted Users**

[](https://gist.github.com/muellerhginsights/3ac409ecf173eee77e3711bfe0fae3c1#step-2--set-permitted-users)

Setup → **Manage Connected Apps** → **HG RGI Platform** → **Edit Policies** → **Permitted Users**:

- **"All users may self-authorize"** — any user can then connect (simplest), **or**
- **"Admin approved users are pre-authorized"** — only assigned users can connect (more control; required if API Access Control is on — see below).

### **Step 2b — Relax IP restrictions (if your org enforces Login IP Ranges)**

[](https://gist.github.com/muellerhginsights/3ac409ecf173eee77e3711bfe0fae3c1#step-2b--relax-ip-restrictions-if-your-org-enforces-login-ip-ranges)

On that same **Edit Policies** screen, under **OAuth Policies → IP Relaxation**, you may need to set **"Relax IP restrictions."**

- HG RGI Platform calls Salesforce from its own servers, whose IPs are not in your users' Login IP Ranges. If IP restrictions are enforced, the connection (or ongoing sync) can be blocked even after a successful login.
- Setting **Relax IP restrictions** applies only to this connected app and does not change your org's general login security.
- If your org does not enforce Login IP Ranges, you can leave this as-is.

### **Step 3 — Grant your integration user access**

[](https://gist.github.com/muellerhginsights/3ac409ecf173eee77e3711bfe0fae3c1#step-3--grant-your-integration-user-access)

(Required if you chose "Admin approved users are pre-authorized.")

1. Setup → **Permission Sets** → create one (e.g. "HG RGI Platform Access").
2. Open it → **Assigned Connected Apps** → **Edit** → add **HG RGI Platform** → **Save**.
3. **Manage Assignments** → **Add Assignments** → select your **integration user** → **Assign**.

*Alternative:* assign the app to the user's profile via Setup → **Profiles** → *[profile]* → **Connected App Access** → check **HG RGI Platform** → Save. (This grants everyone on that profile.)

### **Step 4 — Connect**

[](https://gist.github.com/muellerhginsights/3ac409ecf173eee77e3711bfe0fae3c1#step-4--connect)

Login to the [HG RGI Platform](https://admin.hginsights.com) **Settings → Integrations → Salesforce → Connect**, completes the Salesforce login, and the connection is established.

# 

##