Documentation Index

Fetch the complete documentation index at: https://help.madkudu.com/llms.txt

Use this file to discover all available pages before exploring further.

Connecting Salesforce Without Admin Privileges

  • Published on Jun 18, 2026
  • 1 minute(s) read
Prev Next

A user without admin rights cannot authorize the application until it has been installed and approved by an admin. Please have a Salesforce admin carry out these one-time procedures.

This article serves a specific purpose. If your integration user possesses Salesforce admin privileges, you can follow the instructions provided here instead.

Step 1 — Install / approve the app

  1. A Salesforce admin initiates the connect once (this registers HG RGI Platform in your org), or locates it under Setup → Connected Apps OAuth Usage.

  2. Setup → Connected Apps OAuth Usage → find HG RGI Platform → click Install.

  3. After installing, you may also need to Unblock the app. On that same Connected Apps OAuth Usage row, check the Unblock action:

    • If Unblock is available, click it to approve/allowlist the app.

    • If Unblock is greyed out, the app isn't approved yet — confirm the Install step completed; installing is what enables approval.

    • This is most relevant when API Access Control is enabled, where apps are blocked by default until explicitly installed and unblocked.

Step 2 — Set Permitted Users

Setup → Manage Connected Apps → HG RGI Platform → Edit Policies → Permitted Users:

  • "All users may self-authorize" — any user can then connect (simplest), or

  • "Admin approved users are pre-authorized" — only assigned users can connect (more control; required if API Access Control is on — see below).

Step 2b — Relax IP restrictions (if your org enforces Login IP Ranges)

On that same Edit Policies screen, under OAuth Policies → IP Relaxation, you may need to set "Relax IP restrictions."

  • HG RGI Platform calls Salesforce from its own servers, whose IPs are not in your users' Login IP Ranges. If IP restrictions are enforced, the connection (or ongoing sync) can be blocked even after a successful login.

  • Setting Relax IP restrictions applies only to this connected app and does not change your org's general login security.

  • If your org does not enforce Login IP Ranges, you can leave this as-is.

Step 3 — Grant your integration user access

(Required if you chose "Admin approved users are pre-authorized.")

  1. Setup → Permission Sets → create one (e.g. "HG RGI Platform Access").

  2. Open it → Assigned Connected Apps → Edit → add HG RGI Platform → Save.

  3. Manage Assignments → Add Assignments → select your integration user → Assign.

Alternative: assign the app to the user's profile via Setup → Profiles → [profile] → Connected App Access → check HG RGI Platform → Save. (This grants everyone on that profile.)

Step 4 — Connect

Login to the HG RGI Platform Settings → Integrations → Salesforce → Connect, completes the Salesforce login, and the connection is established.

Related articles