Understand Permission Sets in the OMS Package for Buy with Prime

📘

Buy with Prime API is now available for early access

Sign up for early access to the Buy with Prime API using the 'Sign Up' button below. The API may change as Amazon receives feedback and iterates on it.

A Salesforce permission set is a collection of settings and permissions that give a user access to tools and functions. Permission sets help you manage user permissions by extending user access without changing user profiles.

The OMS package for Buy with Prime provides the following permission sets:

The OMS extension package provides the following permission set:

Assign a permission set to a user

To assign a permission set from the OMS package for Buy with Prime to a user, do the following:

  1. In your Salesforce organization, under Setup, click Users.
  2. Click Permission Sets.
  3. Click the permission set that you want to assign, for example Amazon Buy with Prime for OMS Setup User.
  4. Click Manage Assignments.
  5. Click Add Assignment.
  6. If you don't see users listed, click Select a List View and then click Recently Viewed or click All Users.
  7. Select the checkbox next to the user to whom you want to assign permissions, and then click Next.
  8. Select the expiration options that you want, and then click Assign.

For details about permission sets, in the Salesforce documentation see Permission Sets.

Permission set: Amazon Buy with Prime for OMS Setup User

The Amazon Buy with Prime for OMS Setup User permission set contains access and configuration permissions to the Setup Assistant app. Assign the permission set to non-administrators who need access, keeping in mind that the permission set contains administrator functionality.

Standard object permissions

The following table shows the standard object permissions for the Amazon Buy with Prime for OMS Setup User permission set.

ObjectFieldPermissions
FulfillmentOrder{OBJECT}Read/ViewAll
FulfillmentOrderamazonBwpOrderID__cRead/Edit
FulfillmentOrderLineItem{OBJECT}Not applicable
FulfillmentOrderLineItemamazonBwpOrderLineID__cRead/Edit
Order{OBJECT}Read/ViewAll
OrderAmazon_Sales_Channel__cRead/Edit
OrderamazonBwpOrderID__cRead/Edit
OrderamzPayChargePermissionId__cRead/Edit
OrderItem{OBJECT}Not applicable
OrderItemamazonBwpOrderLineID__cRead/Edit
OrderSummary{OBJECT}Read/ViewAll
OrderSummaryamazonBwpOrderID__cRead/Edit
OrderSummaryamzPayChargePermissionId__cRead/Edit
ReturnOrder{OBJECT}Read/ViewAll
ReturnOrderamazonBwpOrderID__cRead/Edit
ReturnOrderLineItem{OBJECT}Not applicable
ReturnOrderLineItemamazonBwpOrderLineID__cRead/Edit

Custom object permissions

The following table shows the custom object permissions for the Amazon Buy with Prime for OMS Setup User permission set.

ObjectFieldPermissions
Amazon_Sales_Channel__c{OBJECT}
Create/Read/Edit/Delete/ViewAll/ModifyAll/TabVisible
Amazon_Sales_Channel__cBWP_Access_Token_Expires_At__cRead/Edit
Amazon_Sales_Channel__cBWP_Access_Token__cRead/Edit
Amazon_Sales_Channel__cBWP_Authenticated_User__cRead/Edit
Amazon_Sales_Channel__cBWP_Client_Id__cRead/Edit
Amazon_Sales_Channel__cBWP_Client_Secret__cRead/Edit
Amazon_Sales_Channel__cBWP_Business_Product_Id__cRead/Edit
Amazon_Sales_Channel__cIs_Default__cRead/Edit
Entity_Mapping__c{OBJECT}
Create/Read/Edit/Delete/ViewAll/ModifyAll
Entity_Mapping__cAmazon_Sales_Channel__cRead/Edit
Entity_Mapping__cData_Direction__cRead/Edit
Entity_Mapping__cField_Mapping_JSON__cRead/Edit
Entity_Mapping__cISV_Entity__cRead/Edit
Entity_Mapping__cISV_Event__cRead/Edit
Entity_Mapping__cIs_Active__cRead/Edit
Entity_Mapping__cPicklist_Value_Mapping_JSON__cRead/Edit
Entity_Mapping__cSF_Identifier_Field__cRead/Edit
Entity_Mapping__cSF_Identifier_Value__cRead/Edit
Entity_Mapping__cSF_Object__cRead/Edit
Entity_Mapping__cStatic_Value_Mapping_JSON__cRead/Edit
Entity_Mapping__cSystem__cRead/Edit
Package_Log__c{OBJECT}
Create/Read/Edit/Delete/ViewAll/ModifyAll/TabVisible
Package_Log__cDetail__cRead/Edit
Package_Log__cEndpoint__cRead/Edit
Package_Log__cMethod__cRead/Edit
Package_Log__cRequest_Body__cRead/Edit
Package_Log__cResponse_Body__cRead/Edit
Package_Log__cStatus_Code__cRead/Edit
Retryable_Callout__c{OBJECT}
Create/Read/Edit/Delete/ViewAll/ModifyAll
Retryable_Callout__cAmazon_Sales_Channel__cRead/Edit
Retryable_Callout__cHeaders__cRead/Edit
Retryable_Callout__cIdempotency_Key__cRead/Edit
Retryable_Callout__cPayload__cRead/Edit
Retryable_Callout__cRetry_After__cRead/Edit
Setup_Data__cAWS_Authenticated_User__cRead/Edit
Setup_Data__cAWS_URL__cRead/Edit
Setup_Data__cAmazon_Pay_Authenticated_User__cRead/Edit
Setup_Data__cAmazon_Pay_Environment__cRead/Edit
Setup_Data__cAmazon_Pay_Private_Key__cRead/Edit
Setup_Data__cAmazon_Pay_Region__cRead/Edit
Setup_Data__cBWP_Access_Token_Expires_At__cRead/Edit
Setup_Data__cBWP_Access_Token__cRead/Edit
Setup_Data__cBWP_Authenticated_User__cRead/Edit
Setup_Data__cBWP_Refresh_Token__cRead/Edit
Setup_Data__cBWP_Target_Id__cRead/Edit
Setup_Data__cDebug_Enabled__cRead/Edit
Setup_Data__cInbound_Authenticated_User__cRead/Edit
Setup_Data__cJob_Frequency__cRead/Edit
Setup_Data__cJob_Id__cRead/Edit
Setup_Data__cJob_Start_Time__cRead/Edit
Setup_Data__cLog_Deletion_Job_Id__cRead/Edit
Setup_Data__cLogging_Enabled__cRead/Edit
Setup_Data__cMCF_*Read/Edit
Setup_Data__cMax_Logs_Retained__cRead/Edit
Setup_Data__cRetry_Callouts_Job_Id__cRead/Edit

Permission set: Amazon Buy with Prime for OMS API User

The Amazon Buy with Prime for OMS API User permission set configures a user as the Run As user for the Client Credentials Flow in your Amazon Buy with Prime Salesforce connected app. The connected app sends Buy with Prime events to the Salesforce API. Assign the Amazon Buy with Prime for OMS API User permission set to the user who authenticates and authorizes updates to your Salesforce organization for the inbound Buy with Prime events.

Standard object permissions

The following table shows the standard object permissions for the Amazon Buy with Prime for OMS API User permission set.

ObjectFieldPermissions
FulfillmentOrder{OBJECT}Read/Edit/ViewAll/ModifyAll
FulfillmentOrderamazonBwpOrderID__cRead/Edit
FulfillmentOrderLineItem{OBJECT}Not applicable
FulfillmentOrderLineItemamazonBwpOrderLineID__cRead/Edit
Order{OBJECT}Read/Edit/ViewAll/ModfyAll
OrderAmazon_Sales_Channel__cRead/Edit
OrderamazonBwpOrderID__cRead/Edit
OrderamzPayChargePermissionId__cRead/Edit
OrderItem{OBJECT}Not applicable
OrderItemamazonBwpOrderLineID__cRead/Edit
ReturnOrder{OBJECT}Read/Edit/ViewAll/ModifyAll
ReturnOrderamazonBwpOrderID__cRead/Edit
ReturnOrderLineItem{OBJECT}Not applicable
ReturnOrderLineItemamazonBwpOrderLineID__cRead/Edit

Custom object permissions

The following table shows the custom object permissions for the Amazon Buy with Prime for OMS API User permission set.

ObjectFieldPermissions
Amazon_Sales_Channel__c{OBJECT}Read/ViewAll
Amazon_Sales_Channel__cBWP_Access_Token_Expires_At__cRead
Amazon_Sales_Channel__cBWP_Access_Token__cRead
Amazon_Sales_Channel__cBWP_Authenticated_User__cRead
Amazon_Sales_Channel__cBWP_Client_Id__cRead
Amazon_Sales_Channel__cBWP_Client_Secret__cRead
Amazon_Sales_Channel__cBWP_Business_Product_Id__cRead
Amazon_Sales_Channel__cIs_Default__cRead
Entity_Mapping__c{OBJECT}Read/ViewAll
Entity_Mapping__cAmazon_Sales_Channel__cRead
Entity_Mapping__cData_Direction__cRead
Entity_Mapping__cField_Mapping_JSON__cRead
Entity_Mapping__cISV_Entity__cRead
Entity_Mapping__cISV_Event__cRead
Entity_Mapping__cIs_Active__cRead
Entity_Mapping__cPicklist_Value_Mapping_JSON__cRead
Entity_Mapping__cSF_Identifier_Field__cRead
Entity_Mapping__cSF_Identifier_Value__cRead
Entity_Mapping__cSF_Object__cRead
Entity_Mapping__cStatic_Value_Mapping_JSON__cRead
Entity_Mapping__cSystem__cRead
Package_Log__c{OBJECT}Create/Read
Package_Log__cDetail__cRead/Edit
Package_Log__cEndpoint__cRead/Edit
Package_Log__cMethod__cRead/Edit
Package_Log__cRequest_Body__cRead/Edit
Package_Log__cResponse_Body__cRead/Edit
Package_Log__cStatus_Code__cRead/Edit
Retryable_Callout__c{OBJECT}Create/Read/Edit/Delete
Retryable_Callout__cAmazon_Sales_Channel__cRead/Edit
Retryable_Callout__cHeaders__cRead/Edit
Retryable_Callout__cIdempotency_Key__cRead/Edit
Retryable_Callout__cPayload__cRead/Edit
Retryable_Callout__cRetry_After__cRead/Edit
Setup_Data__c{OBJECT}Read
Setup_Data__cDebug_Enabled__cRead
Setup_Data__cLogging_Enabled__cRead
Setup_Data__cMax_Logs_Retained__cRead
Setup_Data__cRetry_Callouts_Job_Id__cRead/Edit

Permission set: V1 Amazon BwP Extension Package Invocable User

Assign the V1 Amazon BwP Extension Package Invocable User permission set to non-administrators who need access to the Salesforce invocable methods for Buy with Prime. You can use the invocable methods in the Salesforce Flow tool to integrate your workflow with Buy with Prime.

Standard object permissions

The following table shows the standard object permissions for the V1 Amazon BwP Extension Package Invocable User permission set.

ObjectFieldPermissions
Order{OBJECT}Read
OrderAmazon_Sales_Channel__cRead
OrderamazonBwpOrderID__cRead

Custom object permissions

The following table shows the custom object permissions for the V1 Amazon BwP Extension Package Invocable User permission set.

ObjectFieldPermissions
Amazon_Sales_Channel__c{OBJECT}Read/Edit
Amazon_Sales_Channel__cBWP_Access_Token_Expires_At__cRead/Edit
Amazon_Sales_Channel__cBWP_Access_Token__cRead/Edit
Amazon_Sales_Channel__cBWP_Authenticated_User__cRead
Amazon_Sales_Channel__cBWP_Client_Id__cRead
Amazon_Sales_Channel__cBWP_Client_Secret__cRead
Amazon_Sales_Channel__cBWP_Business_Product_Id__cRead
Amazon_Sales_Channel__cIs_Default__cRead
Package_Log__c{OBJECT}Create/Read
Package_Log__cDetail__cRead/Edit
Package_Log__cEndpoint__cRead/Edit
Package_Log__cMethod__cRead/Edit
Package_Log__cRequest_Body__cRead/Edit
Package_Log__cResponse_Body__cRead/Edit
Package_Log__cStatus_Code__cRead/Edit
Retryable_Callout__c{OBJECT}Create/Read/Edit/Delete
Retryable_Callout__cAmazon_Sales_Channel__cRead/Edit
Retryable_Callout__cHeaders__cRead/Edit
Retryable_Callout__cIdempotency_Key__cRead/Edit
Retryable_Callout__cPayload__cRead/Edit
Retryable_Callout__cRetry_After__cRead/Edit
Setup_Data__c{OBJECT}Read/ViewAll
Setup_Data__cBWP_Access_Token_Expires_At__cRead/Edit
Setup_Data__cBWP_Access_Token__cRead/Edit
Setup_Data__cBWP_Target_Id__cRead
Setup_Data__cDebug_Enabled__cRead
Setup_Data__cLogging_Enabled__cRead
Setup_Data__cMax_Logs_Retained__cRead
Setup_Data__cRetry_Callouts_Job_Id__cRead/Edit

Related topics

Steps for Installing the Salesforce OMS Package for Buy with Prime