---
schema_version: "1"
id: 9d1285f9351a0ff18874dca9b6f5bad45dc24333965df7efd7dfd8974c361511
title: Add Business Units to Your Org
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/mktg/264-0-0/mc_dm_configure_account_authentication.md
canonical_url: https://help.salesforce.com/s/articleView?id=mktg.mc_dm_configure_account_authentication.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: d93c30a4a5e31d8d69aaa53aa4e3144d1e92255ad8042651798fd07ad891a17a
description: After installing the Distributed Marketing managed package, you can add up to 200 business units to your account. You can choose which users to share the business units with to control access to content. Distributed Marketing uses named principal authentication with the OAuth 2.0 protocol.
products:
  - Marketing
  - Cross Cloud
release: "264"
---
# Add Business Units to Your Org

After installing the Distributed Marketing managed package, you can add up to 200 business units to your account. You can choose which users to share the business units with to control access to content. Distributed Marketing uses named principal authentication with the OAuth 2.0 protocol.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d19631e38">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d19631e38 ">To configure account authentication:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d19631e38 ">DMAdministrator License permission set, Administrator permission (mcdm_15 namespace),
              Manage Auth Providers, Modify All Data, and Customize Application</td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d19631e38 ">To maintain an active integration:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d19631e38 ">Custom Application</td>

          </tr>
        </tbody>
      </table>

![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-mktg-mc_cross-cloud_products-264-0-0-production-enus/bd617332-480f-48e8-b283-3477883c1320/images/icon_important.png)

Important Authenticated calls execute in the context of the user who adds a business unit to Distributed Marketing. So any requests for new authenticated tokens run in the context of this user on behalf of all Distributed Marketing users. The authenticating user for each business unit is logged in the Execute As field on the named credential’s associated Auth. Provider. This user must have the permissions outlined to maintain an active integration and must be an active user for the duration of Distributed Marketing being used. You can change this user for a specific business unit by editing the business unit’s associated Auth. Provider.

A dedicated Marketing Cloud Engagement user is recommended for system authentication, is required per authenticated business unit, and needs these Marketing Cloud Engagement permissions:

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small "><colgroup><col style="width:50%"> <col style="width:50%"></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Content Builder: Assets</td><td class="slds-cell-wrap" style="vertical-align:top;">View, Subscriber Preview</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Content Builder: Folders</td><td class="slds-cell-wrap" style="vertical-align:top;">View</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Email: Subscribers: Subscriber</td><td class="slds-cell-wrap" style="vertical-align:top;">Create, View, Update</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Email: Subscribers: Data Extension</td><td class="slds-cell-wrap" style="vertical-align:top;">Create, View, Update, Delete, Manage Data</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Email: Content: Email</td><td class="slds-cell-wrap" style="vertical-align:top;">Preview, View</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Interaction Studio</td><td class="slds-cell-wrap" style="vertical-align:top;">Access</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Journey Builder</td><td class="slds-cell-wrap" style="vertical-align:top;">Access, View</td></tr></tbody></table>

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-mktg-mc_cross-cloud_products-264-0-0-production-enus/bd617332-480f-48e8-b283-3477883c1320/images/icon_note.png)

Note

- Distributed Marketing uses custom components.
- If you’re using Financial Services Cloud, access the Distributed Marketing Business Unit Setup page directly. Navigate to Visualforce Pages in Setup, select **PostInstallPage**, and click **Preview**. Then continue with step 5.
- Deselect **Enforce login IP Ranges on every request** for Session Settings. You can enable it again after account authentication.
- Content Builder: Assets > Subscriber Preview is only needed for customers using SMS.

1. Log out of all Marketing Cloud Engagement sessions.
    
    ![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-mktg-mc_cross-cloud_products-264-0-0-production-enus/bd617332-480f-48e8-b283-3477883c1320/images/icon_important.png)
    
    Important Salesforce automatically authenticates against logged-in Marketing Cloud Engagement sessions. If you don’t log out of active sessions, Salesforce can connect to the incorrect Marketing Cloud Engagement account.
2. In Salesforce, from the App Launcher, find, and open **Distributed Marketing Administration**.
3. In Business Units, select **Add Business Unit**.
    
    ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-mktg-mc_cross-cloud_products-264-0-0-production-enus/bd617332-480f-48e8-b283-3477883c1320/images/icon_note.png)
    
    Note The system redirects you from Distributed Marketing Administration to the Distributed Marketing Business Unit Setup page.
4. Follow the prompts on the Distributed Marketing Business Unit Setup page to configure your account.
5. To get the latest authentication status for connected business units, navigate to Distributed Marketing Administration, and click the **Update Connection Information** button.
    
    ![Tip](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-mktg-mc_cross-cloud_products-264-0-0-production-enus/bd617332-480f-48e8-b283-3477883c1320/images/icon_tip.png)
    
    Tip To change the display name for the business unit, hover over the display name, and select the pencil.
    
    ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-mktg-mc_cross-cloud_products-264-0-0-production-enus/bd617332-480f-48e8-b283-3477883c1320/images/icon_note.png)
    
    Note Don’t forget to re-enable **Enforce Login IP Ranges on every request**.

- **[Upgrade to Tenant-Specific Endpoints Authentication](https://help.salesforce.com/s/articleView?id=mktg.mc_dm_add_tse_bu_flow.htm&release=264.0.0&type=5)**  
    To enhance the performance of the Marketing Cloud Engagement platform, tenant-specific subdomains are assigned automatically to all customers. This automatic assignment improves API performance, creates a faster experience, and is required for some Marketing Cloud Engagement data centers. You can self-update any connected business units not already using Tenant-Specific Endpoints (TSE) authentication without disrupting any existing connections. All new connections automatically use TSE authentication.