We suggest the oAuth for the PK4 TimeTracker is enabled only for the Salesforce Administrators in your org.
By default, when the app is installed in your org the oAuth option is enabled for all the Salesforce Users in your org.
If a non-Salesforce administrator that does not have access to the TimeTracker objects processes the oAuth for the TimeTracker app by mistake. Then the users will notice issues while using the TimeTracker application in your org.
e.g: The time tracked for a Project is not recorded and shown in the TT details.
To disable the oAuth option for non-Salesforce Administrators
Settings to be made in the Permission Set
- Log in to Salesforce as Admin
- Click on Setup and search for Permission sets in the quick find
- Click the New button from the list
- Enter the permission set information,
- Select the license as Salesforce and Save it,
After you save the permission set,
- You see the Apps list,
- Click on "Assigned Connected Apps" and click the Edit button,
- Add the PK4 TimeTracker oAuth (Admin only) to the Enabled Connected Apps list and save it,
Settings to be made in the PK4 TimeTracker Connected Apps
- Search for Manage Connected app in the quick find
- Click the Edit button for the PK4 TimeTracker in the Connected Apps section
- Select the "admin approved users are Pre-authorized" in the oAuth Policies
- Save it.
Settings to be made in the User Profile
- Search for Profiles in Quick find,
- Click on System Administrator profile,
- From the Connected App Access section, disable the PK4 TimeTracker oAuth (Admin only) check box
- Save it.
Settings to be done in the Users page,
- Search for Users in the Quick find,
- Select the user from the user name from the users list,
- Hover on the "Permission set Assignments", and click the Edit Assignments,
- Select the Enable Permission for the TimeTracker oAuth for Users, to the Enabled permission Sets list and Save it.
Now the oAuth for the PK4 TimeTracker application is enabled only for Salesforce Administrators.