Preauthorize User App Access Through External Client App Policies

Configure who can use your app by defining preauthorized users. When users who are preauthorized access the app, they can bypass the Allow or Deny permission window that pops up.

Required Editions

Available in: Lightning Experience
Available in: Professional, Performance, Unlimited, and Developer Editions
User Permissions Needed
To configure permitted users View all External Client Apps, view their settings, and edit their policies

After you turn on the setting Admin approved users are pre-authorized, only users with the associated profile or permission set can access the app without first authorizing it.

Note
Note If you switch from All Users can self-authorize to Admin-approved users are preauthorized, anyone using the app loses access, unless a user’s permission authorizes the external client app specifically. If users have the Use Any API Client permission, they can access any external client app—even if its Permitted Users setting is set to Admin-approved users are preauthorized. Be careful when using the Use Any API Client permission. As the name implies, you’re giving up your control over authorization.
  1. From Setup, in the Quick Find box, enter External Client Apps Manager, and then select External Client Apps Manager.
  2. From the actions list for the external client app, select Edit Policies.
  3. Under OAuth policies, from the Permitted Users dropdown, select Admin approved users are pre-authorized.
  4. Confirm the change and save the policies.

After you turn on this option, manage access using profiles and permission sets. Select the profile or permission set that should have access by editing the external client app policies or the OAuth policies.