---
schema_version: "1"
id: 194eb46a2ca8879d29d379e130ed17677f06765a48cf525cacd93af9fda564ac
title: Install the User Access and Permissions Assistant
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/perm_install_uapa.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.perm_install_uapa.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 8e61284030b5063e0ce3920659369d43a756997a7e08e67c0ba0570e5e8ff57d
description: To use the User Access and Permissions Assistant, enable the Tooling API. Then download the app from AppExchange, and assign the packaged permission set that comes with the app.
products:
  - Security
  - Salesforce Platform
release: "264"
---
# Install the User Access and Permissions Assistant

To use the User Access and Permissions Assistant, enable the Tooling API. Then download the app from AppExchange, and assign the packaged permission set that comes with the app.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: all editions</td></tr></tbody></table>

Be sure to complete the tasks to enable the Tooling API before installing the app. After you enable the Tooling API, complete the app installation.

- **[Create a Connected App for the Tooling API](https://help.salesforce.com/s/articleView?id=platform.permissions-uapa-create-a-connected-app.htm&release=264.0.0&type=5)**  
    Create a new connected app for the User Access and Permissions Assistant.
- **[Create an Authentication Provider for the Tooling API](https://help.salesforce.com/s/articleView?id=platform.perm_uapa_create_auth_provider.htm&release=264.0.0&type=5)**  
    Create an authentication provider to facilitate authentication with Salesforce.
- **[Update the Callback URL in the Connected App](https://help.salesforce.com/s/articleView?id=platform.perm_uapa_update_callback_URL.htm&release=264.0.0&type=5)**  
    Update the value of the callback URL in the connected app to use the value from the authentication provider.
- **[Create a Named Credential for the Tooling API](https://help.salesforce.com/s/articleView?id=platform.perm_uapa_create_a_named_credential.htm&release=264.0.0&type=5)**  
    To work correctly, the credential that you create must have the API name Tooling\_API\_Credential.
- **[Create a Permission Set to Use the Named Credential](https://help.salesforce.com/s/articleView?id=platform.perm_uapa_create_a_permset.htm&release=264.0.0&type=5)**  
    Create a custom permission set to enable users to use the Tooling API for the User Access and Permissions Assistant. You can assign this permission set to any users who use the app.
- **[Download the User Access and Permissions Assistant Package](https://help.salesforce.com/s/articleView?id=platform.perm_uapa_download_the_app.htm&release=264.0.0&type=5)**  
    Download the User Access and Permissions Assistant from AppExchange.
- **[Assign the Helper App Access Permission Set](https://help.salesforce.com/s/articleView?id=platform.perm_uapa_assign_helper_permset.htm&release=264.0.0&type=5)**  
    For access to the User Access and Permissions Assistant, assign the User Access & Permissions Assistant Access permission set.
- **[Create a Permission Set with Required Permissions for the User Access and Permissions Assistant](https://help.salesforce.com/s/articleView?id=platform.perm_uapa_assign_required_permset.htm&release=264.0.0&type=5)**  
    Create a permission set to assign to users so that they can use the User Access and Permissions Assistant. These permissions are included in the System Admin standard profile. Users with that profile don’t require access to this permission step.
- **[Set User Authentication for the Tooling API Credential](https://help.salesforce.com/s/articleView?id=platform.perm_uapa_set_user_auth.htm&release=264.0.0&type=5)**  
    Set your user account to use the Tooling API Named Credential for authentication.