---
schema_version: "1"
id: b28c3a2a06d45cd7e172f95546be780f770aac5c25817603b95bab9174ed0c04
title: Salesforce Authenticated User Permission Requirements for Archive
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/archive_o_auth_user_permission_requirements.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.archive_o_auth_user_permission_requirements.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 178656cae3e36a11450796eb450b0d3ed1e2820a43a68fb1ffcaa22b061279e7
description: Required setup and configuration for an Authenticated User in the Archive managed package.
products:
  - Security
  - Salesforce Platform
release: "264"
---
# Salesforce Authenticated User Permission Requirements for Archive

Required setup and configuration for an Authenticated User in the Archive managed package.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-own_from_salesforce-264-0-0-production-enus/8ac98673-ede2-4046-a41e-2d5c846f24ff/images/icon_note.png)

Note This content relates to Archive. For Salesforce Archive, see [Store Data Externally with Salesforce Archive](https://help.salesforce.com/s/articleView?id=xcloud.archive_overview.htm&type=5&language=en_US).

In the Salesforce API, the Authenticated User is the user that connects the application to the org. We recommend having a dedicated user as the Authenticated User.

The specific permissions for each user are defined either in the user's profile or via a permission set.

To use the Salesforce System Admin, assign the Salesforce admin profile. Then grant permissions specifically needed for Archive operations.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-own_from_salesforce-264-0-0-production-enus/8ac98673-ede2-4046-a41e-2d5c846f24ff/images/icon_note.png)

Note The [Salesforce Integration User](https://help.salesforce.com/s/articleView?id=release-notes.rn_api_integration_license.htm&release=242&type=5&language=en_US) license isn't compatible with Archive, as it doesn't provide the necessary permission scope.

## Basic Permissions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
          <colgroup>
            <col>
            <col>
            <col>
          </colgroup>
          <thead class="slds-text-title_caps ">
            <tr class="">
              <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d67244e84">Permission</th>
              <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d67244e87">Permission Type</th>
              <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d67244e90">Purpose</th>
            </tr>
          </thead>
          <tbody>
            <tr class="">
              <td data-label="Permission" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e84 "><a href="https://help.salesforce.com/s/articleView?id=000385694&amp;type=1&amp;language=en_US" target="_blank">Bulk API</a></td>

              <td data-label="Permission Type" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e87 ">System Permissions</td>



              <td data-label="Purpose" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e90 ">
                <p>Enables the Authenticated User to permanently delete
                  records and bypass the Recycle Bin during Archive
                  operations.</p>
                <p style="margin-bottom:0;">This permission is necessary for managing large
                  datasets and directly purging records without them lingering in
                  the Recycle Bin.</p>
              </td>

            </tr>
            <tr class="">
              <td data-label="Permission" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e84 ">Modify All</td>

              <td data-label="Permission Type" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e87 ">System Permissions</td>

              <td data-label="Purpose" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e90 ">Grants a user full control over all records for a specified
                object. The user can view, edit, delete, and transfer
                ownership of records, regardless of sharing rules or other
                restrictions.</td>

            </tr>
          </tbody>
        </table>

1. In Setup, create a user with the System Admin profile.
2. Assign the Bulk API permission set to allow Archive to use Hard Delete and bypass the Recycle Bin.

## Additional Permissions

To handle ContentDocuments and restore unarchived records correctly, the Authenticated User requires these additional permissions.

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small "><colgroup><col> <col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Permission</td><td class="slds-cell-wrap" style="vertical-align:top;">Purpose</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Query All Files</td><td class="slds-cell-wrap" style="vertical-align:top;">Grants access to all files, bypassing sharing rules for complete capture during archiving.</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Set Audit Fields upon Record Creation</td><td class="slds-cell-wrap" style="vertical-align:top;">Retains original metadata such as <code>CreatedBy</code>, <code>CreatedDate</code>, <code>ModifiedBy</code>, and <code>ModifiedDate</code> during unarchiving.</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Update Records with Inactive Owners</td><td class="slds-cell-wrap" style="vertical-align:top;">Restores records assigned to inactive users.</td></tr></tbody></table>

## Enable Org-Level Settings

1. In Setup, go to User Interface.
2. Check **Set Audit Fields upon Record Creation** and **Update Records with Inactive Owners**.

Special Configuration for Veeva-Integrated Orgs

If Archive is used with a Veeva-integrated Salesforce org, to support Archive operations specific to Veeva, the Authenticated User requires these permissions.

- Veeva Administrator Permissions—Grants Veeva Administrator permissions to the Authenticated User.
- `CALL_ARCHIVE_USER` Permission—Authenticated User can delete submitted Veeva calls, which is required for proper Archive functionality within Veeva.

## Archive Admin Permission Set

The Archive Admin permission set provides comprehensive permissions for managing the Archive application and includes these permissions.

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
          <colgroup>
            <col>
            <col>
          </colgroup>
          <thead class="slds-text-title_caps ">
            <tr class="">


              <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d67244e297">Permission</th>
              <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d67244e300">Description</th>
            </tr>
          </thead>
          <tbody>
            <tr class="">
              <td data-label="Permission" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e297 ">Archive Abort Archive Activity</td>

              <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e300 ">Abort running archive activities with a status of
                <code>Started</code>.
              </td>

            </tr>
            <tr class="">
              <td data-label="Permission" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e297 ">Archive Activities</td>

              <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e300 ">Access the Activities table.</td>

            </tr>
            <tr class="">
              <td data-label="Permission" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e297 ">Archive Analyzer</td>

              <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e300 ">Run storage analysis and create archive policies from the Storage Analyzer workflow.</td>

            </tr>
            <tr class="">
              <td data-label="Permission" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e297 ">Archive Enable Export</td>

              <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e300 ">Export records from Archive.</td>

            </tr>
            <tr class="">
              <td data-label="Permission" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e297 ">Archive Enable Unarchive</td>

              <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e300 ">
                <p>Unarchive records from the Archive, or via the Archive SDK. </p>
                <p>If access to
                  only one unarchive permission is required, use the <a href="https://help.salesforce.com/s/articleView?id=platform.perm_sets_custom_perms.htm&amp;type=5&amp;language=en_US" target="_blank">custom permission</a> and manually assign it
                  to a <a href="https://help.salesforce.com/s/articleView?id=platform.users_profiles_custom_perms.htm&amp;type=5&amp;language=en_US" target="_blank">custom permission set or a profile.</a></p>
                <ul>
                  <li>Archive Unarchive—Permission to unarchive records from Archive only.</li>

                  <li>Archive Unarchive SDK—Permission to unarchive records via Archive SDK
                    only.</li>

                </ul>
              </td>

            </tr>
            <tr class="">
              <td data-label="Permission" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e297 ">Archive Field-Level Security (FLS)</td>

              <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e300 ">Run an Archive FLS report.</td>

            </tr>
            <tr class="">
              <td data-label="Permission" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e297 ">Archive Home Page</td>

              <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e300 ">Access the Home Page.</td>

            </tr>
            <tr class="">
              <td data-label="Permission" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e297 ">Archive Legal Hold Admin</td>

              <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e300 ">Enable legal hold operations, such as hold, unhold, search,
                and export of legal hold data.</td>

            </tr>
            <tr class="">
              <td data-label="Permission" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e297 ">Archive Legal Hold Table</td>

              <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e300 ">Access Legal Hold report.</td>

            </tr>
            <tr class="">
              <td data-label="Permission" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e297 ">Archive Override Widget Restriction Rule</td>

              <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e300 ">Override Archive Widget Restriction Rule.</td>

            </tr>
            <tr class="">
              <td data-label="Permission" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e297 ">Archive Policy Permission</td>

              <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e300 ">Create Archive policies.</td>

            </tr>
            <tr class="">
              <td data-label="Permission" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e297 ">Archive Purge Policy Permission</td>

              <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e300 ">Create Purge policies.</td>

            </tr>
            <tr class="">
              <td data-label="Permission" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e297 ">Archive Search</td>

              <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e300 ">Search Archive records.</td>

            </tr>
            <tr class="">
              <td data-label="Permission" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e297 ">Archive Settings</td>

              <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e300 ">View and configure Archive settings.</td>

            </tr>
            <tr class="">
              <td data-label="Permission" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e297 ">Archive View Archived Records</td>

              <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e300 ">View archived records on the Visualforce page.</td>

            </tr>
            <tr class="">
              <td data-label="Permission" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e297 ">Export Abort Activity</td>

              <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e300 ">Abort running export activities with a status of
                <code>Started</code>.
              </td>

            </tr>
            <tr class="">
              <td data-label="Permission" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e297 ">Unarchive Abort Activity</td>

              <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d67244e300 ">Abort running unarchive activities with a status of
                <code>Started</code>.
              </td>

            </tr>
          </tbody>
        </table>

![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-own_from_salesforce-264-0-0-production-enus/8ac98673-ede2-4046-a41e-2d5c846f24ff/images/icon_important.png)

Important The Archive Analyzer permission set grants the ability to create, edit, and delete archive policies, in addition to read access to the entire archive. Because archive policies control data retention and can permanently delete data through purge policies, this permission set is generally reserved for Admins only.

The Archive Policy permission set also provides delete capabilities and is generally reserved for Admins only.

## Archive Widget Access and Download Control

Standard users can't access archived data through Archive Widget and can encounter a `system.security.NoAccessException` error.

Optionally, to turn on Archive Widget access, assign the Archive View Archived Records user permission.

1. In Setup, locate Permission Sets.
2. Select **Archive View Archived Records**.
3. To assign the user permission to relevant users, click **Manage Assignments**.
4. Click **Add Assignments**.

## Restrict File Downloads in Archive Widget

To prevent users from downloading files via Archive Widget, remove the download permission from a cloned permission set.

1. In Setup, clone Archive View Archived Records.
2. In the cloned set, remove `DownloadFiles` under Custom SystemPermissions.
3. Save the changes.
4. Assign the cloned set to the relevant users.