---
schema_version: "1"
id: d4bd7b9ad9754d0d755f89fa4d146efdb35f0eef25300fde1fe0c2b5051848ba
title: User Permissions for Data Processing Engine
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/ind/264-0-0/dpe_setup.md
canonical_url: https://help.salesforce.com/s/articleView?id=ind.dpe_setup.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 5bbc1598158cc6401af6422a1060c7d4c75c5d46f8d093267fe2925de72a9b0f
description: Assign users system permissions, object access, and permission sets that they require to manage, run, and monitor Data Processing Engine (DPE) definitions. User permissions for Data Processing Engine vary based on the runtime platform your company uses to run definitions.
products:
  - Cross Cloud
release: "264"
---
# User Permissions for Data Processing Engine

Assign users system permissions, object access, and permission sets that they require to manage, run, and monitor Data Processing Engine (DPE) definitions. User permissions for Data Processing Engine vary based on the runtime platform your company uses to run definitions.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;"><a href="https://help.salesforce.com/s/articleView?id=ind.dpe_editions.htm&amp;release=264.0.0&amp;type=5" title="Review the supported editions and availability for Data Processing Engine (DPE).">View supported editions</a>.</td></tr></tbody></table>

## Permissions to Manage Definitions

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-ind-data_processing_engine-264-0-0-production-enus/80e06924-e6c0-4b82-81cf-e99ccd77d857/images/icon_note.png)

Note For some of the tasks, users require the Customize Application and Modify All Data system permissions. The System Administrator standard profile includes these permissions.

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
        <colgroup>
          <col style="width:25%">
          <col style="width:25%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d3502e69">Task</th>
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d3502e72">Permissions for CRM Analytics Runtime</th>
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d3502e75">Permissions for <span>Data 360</span> Runtime</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="Task" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e69 ">Create and save definitions</td>

            <td data-label="Permissions for CRM Analytics Runtime" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e72 ">
              <p>Customize Application and Modify All Data system permissions</p>
              <p>AND</p>
              <p style="margin-bottom:0;">System Administrator profile</p>
            </td>

            <td data-label="Permissions for Data 360 Runtime" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e75 ">
              <p>Customize Application and Modify All Data system permissions</p>
              <p>AND</p>
              <p style="margin-bottom:0;">Data Cloud Architect permission set</p>
            </td>

          </tr>
          <tr class="">
            <td data-label="Task" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e69 ">Add data sources</td>

            <td data-label="Permissions for CRM Analytics Runtime" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e72 ">
              <p>View access on source objects, their fields, and their related object fields
                used as data sources</p>
              <p style="margin-bottom:0;">Apart from users who design and activate definitions, the
                user that's assigned the Analytics Cloud Integration User profile requires View
                access to the data sources objects and fields. The user requires the permissions
                to sync data from the sources in CRM Analytics.</p>
            </td>

            <td data-label="Permissions for Data 360 Runtime" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e75 ">
              <p>View access on source objects, their fields, and their related object fields used
                as data sources</p>
              <p>AND</p>
              <p>Advanced CSV Data Import permission set to upload .csv files as data sources</p>
              <p style="margin-bottom:0;">If you've implemented Data Cloud One, make sure the user has View access to the
                data sources in the org where they reside. For example, if a definition in the
                home org uses data sources from both the home and companion orgs, the user must
                have View access to the data sources in both orgs. For companion orgs, users only
                require View access to data sources in that org, because definitions in companion
                orgs can only use data from that org.</p>
            </td>

          </tr>
          <tr class="">
            <td data-label="Task" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e69 ">Add writeback targets</td>

            <td data-label="Permissions for CRM Analytics Runtime" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e72 ">
              <p>Create and Edit access on the target objects and fields</p>
              <p>AND</p>
              <p>Prompt Template User system permission to generate field mapping suggestions</p>
              <p style="margin-bottom:0;">On a Writeback Object node, a writeback user must be selected. The list of users
                available for selection are ones that are assigned the System Administrator
                profile. </p>
            </td>

            <td data-label="Permissions for Data 360 Runtime" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e75 ">
              <p>Create and Edit access on the target objects and fields</p>
              <p>AND</p>
              <p>Prompt Template User system permission to generate field mapping suggestions</p>
              <p style="margin-bottom:0;">On a Writeback Object node, a writeback user must be selected. The list of users
                available for selection are ones that are assigned the System Administrator
                profile.</p>
            </td>

          </tr>
          <tr class="">
            <td data-label="Task" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e69 ">Activate definitions</td>

            <td data-label="Permissions for CRM Analytics Runtime" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e72 ">
              <p>Customize Application and Modify All Data system permissions</p>
              <p>AND</p>
              <p style="margin-bottom:0;">Data Pipelines Base User permission set</p>
            </td>

            <td data-label="Permissions for Data 360 Runtime" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e75 ">
              <p>Customize Application and Modify All Data system permissions</p>
              <p>AND</p>
              <p style="margin-bottom:0;">Data Cloud Architect permission set</p>
            </td>

          </tr>
          <tr class="">
            <td data-label="Task" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e69 ">Delete definitions</td>

            <td data-label="Permissions for CRM Analytics Runtime" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e72 ">Customize Application and Modify All Data system permissions</td>

            <td data-label="Permissions for Data 360 Runtime" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e75 ">Customize Application and Modify All Data system permissions</td>

          </tr>
          <tr class="">
            <td data-label="Task" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e69 ">Manage input variables for dynamic filtering and formulas</td>

            <td data-label="Permissions for CRM Analytics Runtime" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e72 ">System Administrator profile</td>

            <td data-label="Permissions for Data 360 Runtime" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e75 ">System Administrator profile</td>

          </tr>
          <tr class="">
            <td data-label="Task" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e69 ">Upload or download definitions as JSON files</td>

            <td data-label="Permissions for CRM Analytics Runtime" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e72 ">Customize Application and Modify All Data system permissions</td>

            <td data-label="Permissions for Data 360 Runtime" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e75 ">Customize Application and Modify All Data system permissions</td>

          </tr>
        </tbody>
      </table>

## Permissions to Run Definitions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
        <colgroup>
          <col style="width:33.33333333333333%">
          <col style="width:33.33333333333333%">
          <col style="width:33.33333333333333%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d3502e267">Task</th>
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d3502e270">Permissions for CRM Analytics Runtime</th>
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d3502e273">Permissions for <span>Data 360</span> Runtime</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="Task" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e267 ">Start a run from builder</td>

            <td data-label="Permissions for CRM Analytics Runtime" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e270 ">
              <p>Customize Application and Modify All Data system permissions</p>
              <p>AND</p>
              <p style="margin-bottom:0;">Data Pipelines Base User permission set</p>
            </td>

            <td data-label="Permissions for Data 360 Runtime" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e273 ">
              <p>Customize Application and Modify All Data system permissions</p>
              <p>AND</p>
              <p>Data Cloud Architect permission set</p>
              <p style="margin-bottom:0;">In companion orgs, users also require the Data Cloud One User permission set.</p>
            </td>

          </tr>
          <tr class="">
            <td data-label="Task" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e267 ">Add the Data Processing Engine custom action to a flow</td>

            <td data-label="Permissions for CRM Analytics Runtime" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e270 ">Customize Application, Modify All Data, and Manage Flows system
              permissions</td>

            <td data-label="Permissions for Data 360 Runtime" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e273 ">Customize Application, Modify All Data, and Manage Flows system
              permissions</td>

          </tr>
          <tr class="">
            <td data-label="Task" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e267 ">Cancel an in-progress run</td>

            <td data-label="Permissions for CRM Analytics Runtime" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e270 ">Salesforce Administrator profile</td>

            <td data-label="Permissions for Data 360 Runtime" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e273 ">Salesforce Administrator profile</td>

          </tr>
        </tbody>
      </table>

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-ind-data_processing_engine-264-0-0-production-enus/80e06924-e6c0-4b82-81cf-e99ccd77d857/images/icon_note.png)

Note To run definitions that process records on-demand, users need the Run Data Processing Engine Definitions On Demand user permission. This user permission is available by default with the Data Processing Engine On Demand permission set license.

## Permissions to Monitor and Troubleshoot Definitions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d3502e364">Task</th>
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d3502e367">Permissions</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="Task" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e364 ">Access Monitor Workflow Services in Setup</td>

            <td data-label="Permissions" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e367 ">Salesforce Administrator profile</td>

          </tr>
          <tr class="">
            <td data-label="Task" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e364 ">View failed records of a run</td>

            <td data-label="Permissions" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e367 ">Customize Application and Modify All Data system permissions</td>

          </tr>
          <tr class="">
            <td data-label="Task" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e364 ">Download failed records of a run</td>

            <td data-label="Permissions" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e367 ">Customize Application and Modify All Data system permissions</td>

          </tr>
          <tr class="">
            <td data-label="Task" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e364 ">View Data Manager in CRM Analytics</td>

            <td data-label="Permissions" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e367 ">Data Pipelines Base User permission set</td>

          </tr>
          <tr class="">
            <td data-label="Task" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e364 ">Troubleshoot recipes in CRM Analytics</td>

            <td data-label="Permissions" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e367 ">Data Pipelines Add On User permission set</td>

          </tr>
          <tr class="">
            <td data-label="Task" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e364 ">Track runtime platform usage by definition runs</td>

            <td data-label="Permissions" class="slds-cell-wrap" style="vertical-align:top;" headers="d3502e367 ">
              <p>Customize Application system permission</p>
              <p>AND</p>
              <p style="margin-bottom:0;">Data Pipelines Base User permission set</p>
            </td>

          </tr>
        </tbody>
      </table>

#### See Also

- [Manage Permission Set Assignments](https://help.salesforce.com/s/articleView?id=platform.perm_sets_manage_assignments.htm&type=5&language=en_US)
- [Data 360 Standard Permission Sets](https://help.salesforce.com/s/articleView?id=data.c360_a_userpermissions.htm&language=en_US)
- [Feature Availability in Data 360](https://help.salesforce.com/s/articleView?id=data.c360_a_feature_availability.htm&language=en_US)
- [Data 360 Standard Editions and Licenses](https://help.salesforce.com/s/articleView?id=data.c360_a_dc_editions.htm&language=en_US)