Salesforce Setup

User Licensing, Access Control, Permission Sets, and Community Partner

Salesforce setup begins when a user installs Valorx Managed Package from AppExchange. Salesforce Admins would be able to install it in Sandbox or Production Orgs.

Once Valorx package is installed, Salesforce Admins can proceed to the below setup steps: 1. Assign Licenses to Users: Production level access. 2. Configure Valorx User Access: Configures access at different levels. 3. Assign Permission Sets: User-level functionality that gives access to various tools and functions. 4. Enable API Access: Ensure users have the API Enabled permission, configured via their Profile or an assigned Permission Set. 5. Configure Valorx Fusion Connected App: To ensure Fusion users can access and use Fusion without authentication issues 6. Assigning Licenses to Community Partner: Grant licenses to Community Partner users who need access to Fusion

Access Control is only honored in Production environment.

Sandboxes are usually used for development and UAT. To streamline the process, runtime users can run any apps in sandboxes, as long as they have the Valorx Permission set assigned to them.

Assign Licenses to Users

Salesforce Admins should be able to provide licenses to the users who require Valorx access. On the setup → installed packages, find the Valorx package. Against the Valorx package, click on Manage Licenses.

Package Manager window will open where you will find an overview of Valorx licenses along with a list of users who currently possess the license. Additionally, you will be provided with options to either add or remove user license assignments.

The first section "Enable for Platform Integrations" will have the information regarding the below

1. Package Name: This refers to the name of the package that is being managed within the Salesforce platform. It serves as a unique identifier for the particular package.

2. Status: The "Status" represents the current condition or state of the package. It could indicate whether it is active, inactive, installed, uninstalled, or any other relevant status.

3. Expiration Date: The "Expiration Date" is the date when the current license or subscription for the package is set to expire. After this date, the access or usage of the package might be restricted, or a renewal might be required.

4. Enable for Platform Integrations: This is a feature or setting that allows the software package or integration to interact and integrate with other platforms, systems, or applications within the Salesforce. Enabling this option ensures that the package can seamlessly work with other integrated components.

5. Publisher: The "Publisher" refers to the organization or entity that developed and released the software package or integration. It identifies the source or origin of the package.

6. Allowed Licenses: "Allowed Licenses" denotes the total number of user licenses that the organization is permitted to assign for this particular package. It signifies the maximum number of users who can use this package.

7. Used Licenses: "Used Licenses" indicates the current number of user licenses that have been assigned and are actively being used by users for the specific package.

In the second section of "Licensed Users", you have the option to add or remove users. To add users, simply click on "Add User." This action will display a list of available users from which you can make your selection. After choosing the desired users, click "Add," and their information will be displayed under the "Selected Users" section.

In this section, you can discover details about the permitted number of licenses and the current allocation status. Access to Valorx Fusion is granted exclusively to users who have been assigned a license.

Configure Valorx User Access

As a part of our managed package, we ship a field on the User object called Valorx User Access (see image below). This can control user’s access level using this picklist.

There are three different access levels available:

• Design Studio: Design or any changes to the app can be made with the permission level.

• Runtime + Express Mode: Run the Valorx apps along with the ability to create apps in Express mode.

• Runtime Only: Run the app but no changes can be made.

Recommended Action: Add Valorx User Access field to User layout (one-time).

Assign Permission Sets

Valorx ships with three standard permission sets. Admin, Design Studio, and Runtime + Express Mode.

Admin: Admin permission set controls Valorx User Access field on the User object. Valorx User Access controls user’s access levels in the Valorx client. Admin permission set does not include Runtime or Design Studio permissions.

Design Studio: Assign Design Studio permission set to those who need to design and promote apps. This permission set includes everything included in Runtime + Express Mode permission set.

Runtime + Express Mode: These permission sets provide different levels of access to Valorx package components. Most end users would require Runtime + Express Mode permission set.

Valorx also provides an option to assign the licenses through Valorx Admin. Click Valorx Administration to know how to provide the Licenses through Valorx Admins.

License to Community Partner: This is an optional license offered to users based on the specific needs of the organization. It grants limited permissions exclusively to designated community users within a Salesforce organization.

Enable API Access

To use Valorx Fusion, users must have the API Enabled permission in Salesforce. This can be configured on the user’s Profile or via an assigned Permission Set.

Steps to Enable API Access

1. Log in to Salesforce as an Admin and navigate to Setup.

2. In Setup, go to Administration → Users.

3. Do one of the following:

   • Select Profiles, then choose the relevant user profile, or

   • Select Permission Sets, then choose the relevant permission set

4. Scroll to System Permissions.

5. Click Edit.

1. Locate and enable API Enabled.

2. Click “Save”.

---

Configure Valorx Fusion Connected App

Valorx Fusion uses a Salesforce Connected App to establish a secure connection between Fusion and Salesforce. The Connected App handles authentication and allows users to sign in to Fusion using their Salesforce credentials.

The required Connected App varies depending on your Fusion version and platform. Starting with Fusion v21.20 and later, a new Connected App (Valorx Fusion v2) is required for Fusion Windows Client users.

If the Valorx Fusion Managed Package v2.4 is not yet installed, this Connected App must be configured manually to support updated authentication and security enhancements. Earlier versions of Fusion continue to use the previous Connected App (Valorx Fusion). Fusion Mac and the Google Sheets Add-in use a separate Connected App (Valorx Fusion Cloud).

Action required by July 10, 2026

All organizations must implement the new Valorx Fusion Connected App by this date to ensure uninterrupted and more secure connectivity between Valorx Fusion and Salesforce.

Use the quick-lookup table below, or jump straight to the scenario that matches your setup.

Fusion Version	Required Connected App
Fusion v21.20 and later	Valorx Fusion v2
Fusion Mac and Google Sheets Add-ins	Valorx Fusion Cloud
Fusion v21 and earlier	Valorx Fusion

What You Need To Do, Based On Your Setup

NO ACTION NEEDED Managed Package v2.4 installed

Managed Package v2.4 includes both new Connected Apps (Valorx Fusion v2 and Valorx Fusion Cloud), so most of the setup is handled for you automatically.

Fusion Windows Client v21.20 or v21.30: You'll be given a choice between the Legacy Connected App (Valorx Fusion) and the New Connected App (Valorx Fusion v2) when setting up your connection. We recommend choosing Valorx Fusion v2, since it includes the latest authentication and security improvements.

ACTION NEEDED Older Managed Package (v1.9 or earlier) + Windows Client v21.20 or later

Your Fusion Windows Client needs the new Valorx Fusion v2 Connected App, but since your Managed Package hasn't been upgraded, it won't be installed for you automatically.

Action needed: Ask your Salesforce Admin to manually install the Valorx Fusion v2 Connected App. This is a one-time setup. See the installation steps below.

Risk if not done: Users won't be able to log in to Fusion until this is installed.

TIP: If you upgrade to Managed Package v2.4 instead, this Connected App is installed for you automatically, no manual step required.

ACTION NEEDED Managed Package v2.4 installed + Windows Client v21.10 or lower

Your Fusion Windows Client is on an older version that isn't compatible with the new Valorx Fusion v2 Connected App.

Action needed: Install the Fusion Windows Client v21.20 or later.

Risk if not done: Users won't be able to log in to Fusion until this is installed.

HIGH RISK Older Managed Package (v1.9 or earlier) + Windows Client older than v21.20

This combination is at high risk. Users on this setup may lose the ability to log in to Fusion without warning.

Action: Upgrade as soon as possible. See the Recommended Fix below.

Risk if skipped: Users may lose access to Fusion without warning after 10th July 2026.

Recommended Fix (Fastest Path)

Upgrading both components is the simplest way to stay fully supported.

Component	Version	Notes
Valorx Managed Package	v2.4	Includes Valorx Fusion v2 and Valorx Fusion Cloud
Valorx Windows Client	v21.30	Latest available version

Download Latest Windows Fusion Client and Managed Package:

Windows Fusion Managed Package

Can't Upgrade Managed Package Right Now?

Your setup	Add this	What it means
Older Managed Package + Windows Client v21.20 or v21.30	Manually install Valorx Fusion v2	Select "New Connected App" when setting up the connection.
Older Managed Package + Mac or Google Sheets	Manually install Valorx Fusion Cloud	Select "New Connected App" when setting up the connection.

Configure Valorx Fusion Connected App v2

Use this section if you are installing or upgrading to Fusion v21.20 or later. Valorx Fusion v2 is required for these versions and includes updated authentication and security settings. If Managed Package v2.4 is not installed, the Connected App must be configured manually.

If users are unable to log in, the following error may appear if access is blocked:

Follow the steps below to manually install the Valorx Fusion v2 Connected App in your Salesforce organization.

1

Go to Setup

In your Salesforce org, click the gear icon (⚙) at the top right corner of the screen, then select Setup from the dropdown menu.

2

Search for Connected Apps OAuth Usage

In the Quick Find search box on the left sidebar, type Connected Apps OAuth Usage and select it from the search results.

3

Select Valorx Fusion v2

In the Connected Apps OAuth Usage list, locate and click on Valorx Fusion v2 to open its details.

4

Click Install

On the Valorx Fusion v2 details page, click the Install button to begin the installation process.

5

Confirm the Popup

A confirmation popup will appear. Click Install in the popup to proceed with the installation.

6

Installation Confirmed

A confirmation page will be displayed, indicating that Valorx Fusion v2 has been successfully installed as a Connected App in your Salesforce org.

If Valorx Fusion Does Not Appear in the List

If you already have the Fusion managed package is already installed but “Valorx Fusion” is not listed under Connected Apps OAuth Usage, follow the steps below:

1. Using a Salesforce System Administrator user, open Excel and click the Valorx Fusion tab on the Ribbon.

2. Click Start button.

3. Click New Connection.

4. Enter a name and choose the appropriate Salesforce endpoint, then click Add.

5. Log in using the System Administrator Salesforce credentials.

6. Once the connection is successful, go back to Salesforce Setup → Connected Apps OAuth Usage.

7. You should now see Valorx Fusion in the list, ready for installation.

---

OAuth Authentication Errors

The following sections describe common OAuth errors that may occur when connecting to Fusion and how to resolve them.

Error: OAUTH_APP_BLOCKED

Issue: Users may see the following error while connecting to Fusion:

• Connection Failed

• App Name: Valorx Fusion

• Error Code: OAUTH_APP_BLOCKED

• Error Message: This app is blocked by admin

This error occurs when the Valorx Fusion Connected App is explicitly blocked in Salesforce. When blocked, all login attempts are denied, including attempts by System Administrators.

Resolution

1. Go to Setup.

2. Search for Connected Apps OAuth Usage.

3. Select Valorx Fusion.

4. If the Unblock button appears, click Unblock.

Unblock Valorx Fusion

Error: OAUTH_APP_ACCESS_DENIED

Issue: Users may see the following error:

• Connection Failed

• App Name: Valorx Fusion

• Error Code: OAUTH_APP_ACCESS_DENIED

• Error Message: User is not admin approved to access this app

This error occurs when the Connected App is configured with the following setting:

• Permitted Users: Admin-approved users are pre-authorized

In this configuration, users must be explicitly granted access through Profiles or Permission Sets. If users are not allow listed, Salesforce blocks OAuth authentication.

Resolution

Option 1 — Approve Specific Users (Recommended)

1. Go to Setup.

2. Search for Manage Connected Apps.

3. Click Valorx Fusion.

4. Click Manage Profiles.

5. Select the required Profiles.

6. Click Save.

Option 2 — Allow All Users to Self-Authorize

If admin approval is not required:

1. Go to Setup → App Manager.

2. Click Valorx Fusion.

3. Click Edit Policies.

4. Under OAuth Policies, for Permitted user set to:

   • Permitted Users = All users may self-authorize

5. Click Save.

Permitted Users Option Locked (Admin-Approved Only)

Issue: While configuring the Connected App:

• The Permitted Users setting is greyed out and cannot be edited.

• Users may also encounter the OAUTH_APP_ACCESS_DENIED error.

This occurs when Salesforce API Access Control is enabled at the org level.

When the following security setting is enabled:

For admin-approved users, limit API access to only allowlisted connected apps.

Salesforce automatically:

• Forces Connected Apps to Admin-approved users

• Locks the Permitted Users setting

• Requires manual authorization of users

• Prevents user self-authorization

This is expected Salesforce security behavior.

Resolution

Since the setting cannot be modified, users must be explicitly authorized.

Steps to Authorize Users

1. Go to Setup.

2. Search for Manage Connected Apps.

3. Select Valorx Fusion.

4. Click Manage Profiles.

5. Add the required Profiles.

6. Click Save.

7. Ask users to reconnect to Fusion.

Salesforce Reference

For additional details about API access restrictions, refer to Salesforce documentation:

Restrict Access to APIs with Connected Apps https://help.salesforce.com/s/articleView?id=xcloud.security_api_access_control_all_users.htm&type=5

---

Assigning License to Community Partner

A community user is an individual with authorized entry to a designated community within a Salesforce organization. In Salesforce, the access and permissions for community users can be managed using diverse settings and configurations. Companies have the flexibility to tailor what community users can see, modify, and engage with, thereby ensuring proper protection of sensitive information and data.

Clone Permission Set:

1. Log in to Salesforce and go to Setup. Search for the "Permission Sets" and select it from the list.

2. Look for "Valorx ExcelUI Admin", "Valorx ExcelUI Design Studio" or "Valorx ExcelUI Runtime + Express Mode" from the list of Permission Sets and click on "Clone" depending on which permission set needs to be assigned.

1. Provide a descriptive logical name and API name under "Enter Permission set information" for the cloned permission set, then click "Save."

1. Now open the permission set that you have created by cloning.

2. Click on "Object Settings" under Apps from the Permission Set Overview window.

1. Click on the "App" object and then click on the "Edit" button.

1. Uncheck the box next to "View All" in the Object Permissions section and click on "Save".

1. Open the "Access Control" object and repeat steps 6 and 7 to remove the "View All" access.

1. Go back to the Object Settings and look for any other objects with the "View All" permission.

2. For each object found with this permission, open it and follow Step 6 and 7 to remove the "View All" access.

Grant the partner community user a new (cloned) permission set.

1. In Salesforce setup, navigate to Users > Users and open the specific partner community user's profile.

2. Under "Permission Sets," click "Edit Permission Set Assignment."

3. Assign the desired cloned permission set and click Save.

Enable Customer Access to Files

1. Start by opening the App Launcher and search for “Valorx” in the search box.

1. Select the Valorx App and pick the app you want to share from the “App Name” list.

1. Navigate to the "Notes and Attachments" section and click on View All to see all the existing files.

1. Choose the first file click on down arrow and click on “Share” from the menu at the top right corner.

2. A Share window will pop up, where you can expand the “Who Can Access” section.

3. Turn on "Customer Access" for the App Name and click on Done.

Note: Repeat Steps 4-6 for each file in the “Notes and Attachments” section.

1. Access Salesforce "Setup" and look for "Sharing Settings"; click on it to open.

2. Under "Default Sharing Settings," click on Edit.

1. Find the "App" object and change its "Default External Access" to "Public Read Only" from the drop-down menu.

2. Save the changes made to the "Default Sharing Settings."

Check the following once you complete assigning the new permission set and enabling the customer access to the related files:

• Test the connection using Valorx Fusion with the partner community user. The app with "Customer Access" sharing enabled will now be accessible to the user.

• To provide access to an additional app, follow steps 2-7 under the "Enable Customer Access to Files" section mentioned above.