To configure Approved Email for admins, content admins and integration users:

1. Grant the following permissions:

   Object	Object Permission	Object Types	Fields	Field Permission
   account__v	R	n/a	approved_email_opt_type__v language__v restricted_products__v	Read
   approved_document__v	CRED	case_template__v email_fragment__v email_receipt__v email_template__v engage__v medical_inquiry_template__v	allow_any_product_fragment__v allowed_document_ids__v approved_document_status__v check_consent__v content_type__v created_by__v created_date__v detail_group__v document_description__v document_host_url__v document_id__v document_last_mod_datetime__v email_allows_documents__v email_domain__v email_fragment_html_file__v email_from_address__v email_from_name__v email_html_file__v email_replyto_address__v email_replyto_name__v email_subject__v email_template_fragment_document_id__v email_template_fragment_html_file__v isi_document_id__v language__v modified_by__v modified_date__v name__v other_document_id_list__v pi_document_id__v piece_document_id__v product__v publish_method__v status__v territory__v vault_document_id__v This is the Field Name, not the Field Label. vault_instance_id__v	Edit
   approved_email_settings__v	R	n/a	All Fields	Read
   channel_metrics__v	R	email__v	account__v channel_value__v channel_source__v external_id__v last_email_error_date__v email_delivery_error__v email_activity__v	Read
   email_activity__v	CRE	email_activity__v vault_activity__v	activity_datetime__v approved_document__v city__v click_url__v client_name__v client_os__v client_type__v created_by__v created_date__v country__v device_type__v event_msg__v event_type__v ip_address__v link_name__v modified_by__v modified_date__v name__v object_type__v region__v sent_email__v user_agent__v vault_doc_id__v vault_document_major_version__v vault_document_minor_version__v vault_doc_name__v vault_document_number__v vault_document_title__v vault_instance_id__v	Edit
   multichannel_consent__v	CRED	approved_email__v clm__v engage__v sample_consent__v	account__v capture_datetime__v channel_source__v channel_value__v created_by__v created_date__v detail_group__v last_device__v mobile_id__v modified_by__v modified_date__v opt_expiration_date__v opt_type__v optout_event_type__v product__v signature_datetime__v signature_id__v signature__v	Edit
   product__v	CRED	n/a	vexternal_id__v	Edit
   sent_email__v	CRE	call__v clm__v email_receipt__v events_management__v medical_event__v medical_inquiry__v	call2__v email_config_values__v email_config_values_file__v email_content_file__v email_sent_date__v failure_msg__v last_activity_date__v list_unsubscribe_header_v related_transaction_id__v sent_email_status__v territory__v	Edit
   			account_email__v account__v approved_email_template__v capture_datetime__v created_by__v created_date__v detail_group__v email_fragments__v email_group_id__v email_source__v mc_capture_datetime__v mobile_id__v modified_by__v modified_date__v object_type__v ownerid__v product__v scheduled_send_datetime__v sender_email__v subject__v valid_consent_exists__v	Read
   sent_fragment__v	R	All applicable object types	created_by__v created_date__v modified_by__v modified_date__v	Read
   tsf__v	R	n/a	account__v allowed_products__v	Read
   user__sys	R	n/a	approved_email_admin__v	Read
   user_detail__v	CRED	user_detail__v	user__v	Read

   If Dynamic Access Control is enabled for any of the objects leveraged by Approved Email, for example Sent Email, Email Activity, or Multichannel Consent, the Approved Email integration user should have All Object Record Read and All Object Record Edit permissions enabled.

2. Navigate to Application in the permission set.

3. Grant the administrator and the integration user access to File Staging in the Enable Access column.

   

4. Grant the administrator and the integration user access to API in the Enable Access column.

5. Navigate to the Pages tab in the permission set.

6. Grant the administrator and the integration user access to the following pages:

   • Approved Email Administration
   • CRM PL1 Generic Page
   • CRM PL3 Generic Page

     PL1 and PL3 are generic layouts used to render various pages across modules in Vault CRM.

7. Navigate to the Tabs tab in the permission set.
8. Grant the administrator and the integration user access to the CRM Setup Tab Collection.

9. Grant the administrator and the integration user access to the Approved Email tab.

10. Navigate to Business Admin > Objects > user_territory__v.

11. Create a user_territory__v record for the integration user and assign the integration user to the root territory in the vault. For more information, see Viewing Territories in the Hierarchy.

12. Update the WHERE clause and verify users have read access to the modified_date__v field if the following VMOCs are enabled:
    • sent_email__v - WHERE account__v IN (SELECT id FROM account__vr) AND created_date__v >= LAST_DAYS:90
    • sent_fragment__v - WHERE account__v IN (SELECT id FROM account__vr) AND created_date__v >= LAST_DAYS:90
13. Ensure users have read access to the modified_date__v field on the channel_metrics__v object.

14. Grant Execute access to the Send Email action on the appropriate account__v object types for testing purposes.

    The Send Email action does not control the ability Send Email on mobile devices. The action is displayed based on the user's permissions to the Sent Email and Multichannel Consent objects.

15. Add iPad as a selected value to the last_device__v field on the account__v object type on the Sent Email object.

Designating Content Admins

An additional process is required to designate users as content admins:

1. Place the approved_email_admin__v field on the appropriate user__sys layouts.
2. Navigate to the appropriate user.
3. Select the Approved Email Admin check box.
4. Select Save.

5. Log in as the vault owner.

6. Navigate to Admin > Users & Groups.

7. Select the appropriate user.

8. Verify the user is granted Full User license to the Approved Email application in Vault CRM.