Maintenance log and emailed errors regarding insufficient permissions during the sync batch point to the Salesforce Sync User missing the necessary permissions. Examples include "secure query included inaccessible field" and "System.QueryException: No such column."

We recommend that the primary sync runs against a user who has the standard Salesforce system administrator profile. This ensures the running user has all the permissions needed for the sync to run successfully. If you need the sync to run against a user with a different profile please ensure they have one of our permission sets. We provide permission sets that cover all the objects within our package.

However, Salesforce also has permissions that could cause issues if they are not enabled. E.g. "View Setup and Configuration". Below is a list of objects that the user running the primary sync will require:

SELECT Id FROM AsyncApexJob
SELECT Id FROM ApexClass
SELECT Id FROM User
SELECT Id FROM CronTrigger
SELECT Id FROM Organization
SELECT Id FROM CustomNotificationType
SELECT Id FROM PermissionSetAssignment
SELECT Id FROM PermissionSet
SELECT Id FROM PackageLicense
SELECT Id FROM RecordType

The sync user will also need Marketing User enabled and access to create and edit Salesforce Campaigns (and their members) if you map events and attendees to Salesforce Campaigns.

All users should have one of our permission sets, and the Salesforce sync user must have the admin full permission set. More on permission sets.

We are unable to troubleshoot custom profiles for you. Please test in a sandbox thoroughly before use.

Note: Unlike an external app, our integration runs entirely from within Salesforce and only calls out to Eventbrite, not the other way round. The sync user is the one that manages the timing and configuration of those calls out. More on security.

Related Articles

• Permissions [Full Guide]

• How do I change the sync user?

• Does the sync user comply with Salesforce's MFA requirements for System Administrators?