Skip to main content

Connected App Permissions

New permissions for Salesforce Connected Apps

Yahel Gaver avatar
Written by Yahel Gaver
Updated over 3 months ago

What's Changing?

Salesforce is implementing a security enhancement that will impact how uninstalled connected apps, including our Sweep app, function within your Salesforce org. This change is relevant to any user who has authorized the Sweep app by clicking 'Allow' on the OAuth page after the change has been enabled by salesforce (expected in early September 2025).

To maintain a user's connection, you must either install the connected app or ensure they have the "Approve Uninstalled Connected Apps" permission. Without one of these, the connection to the Sweep app will not be able to function, and you may experience an interruption in their workflow.

Am I Impacted?

You aren’t impacted by this change if the connected app was authorized before September 2025.

You are impacted by this change if the connected app was authorized after September 2025, is currently uninstalled and the connected user does not have the "Approve Uninstalled Connected Apps" permission enabled. To check this:

  1. Check if the app is uninstalled and identify connected users:

    • In your Salesforce org, navigate to Setup.

    • In the Quick Find box, type Connected Apps and select Connected Apps OAuth Usage.

    • On this page, look for the Sweep connected app. This page shows all apps that have been used in your org. If the app is listed here but has the “install” button under the Actions column, it is uninstalled.

    • Click the number under the User Count column to see a list of all users who have authorized the Sweep app. This list is your key to identifying everyone who needs this permission.


  2. Check if the user has the permission:

    • For each user identified in the previous step, navigate to their user profile page.

    • In the User summary, use the search box to search for "Approve Uninstalled Connected Apps".

    • If the permission appears in the search results, it is enabled for the user. If it does not, it means the permission is not enabled, and they will be impacted.

How to Prepare for the Change

You have two options to ensure all users can continue to access the Sweep app.

Option 1: Install the Connected App (Recommended)

Installing the connected app ensures that it will function correctly and is the most straightforward solution.

  1. In your Salesforce org, navigate to Setup.

  2. In the Quick Find box, type Connected Apps and select Manage Connected Apps.

  3. Click the Install button next to the Sweep connected app.

Option 2: Grant a Specific Permission

If you choose not to install the connected app, you can manually grant the "Approve Uninstalled Connected Apps" permission to all users who need to connect.

  1. Identify all users of the Sweep app:

    • Navigate to Setup.

    • In the Quick Find box, type Connected Apps and select Connected Apps OAuth Usage.

    • Click on the Sweep connected app's name.

    • Click User Usage to see a list of all users who have authorized the Sweep app.

  2. Assign the permission:

    • A. Recommended Method - Using a Permission Set:

      • From Setup, search for and select Permission Sets.

      • Create a new Permission Set (e.g., "Sweep App Users").

      • In the new Permission Set, find and enable the Approve Uninstalled Connected Apps permission under System Permissions.

      • Assign this Permission Set to all the users you identified in the previous step.

    • B. Using User Profiles:

      • From Setup, search for and select Profiles.

      • Select the profiles of the users who need access to the Sweep app.

      • Under System Permissions, enable Approve Uninstalled Connected Apps.

Did this answer your question?