Before configuring authentication in Genesys Cloud for Salesforce, you must create an OAuth client in Genesys Cloud. 

At a minimum, the roles that you assign to the client credentials grant for the OAuth client must have the following permissions in Genesys Cloud. The permissions vary depending on the feature that you want to use in Genesys Cloud for Salesforce.  

• Routing of Salesforce Emails
  • Architect > Flow > Search, View
  • Conversation > Email > Create
  • Routing > Queue > Search, View
  • Routing > Skill > Manage 
• External Routing of Salesforce Chats
  • Analytics > Conversationdetail > View
  • Conversation > Communication > Disconnect
  • Conversation > Message > Receive
  • Messaging > Integration > View
  • Routing > Queue > Search
• Campaign Management
  • Outbound > Callable Time Set > View
  • Outbound > Campaign > Add, Delete, Edit, View
  • Outbound > Contact > Add, Delete, View
  • Outbound > Contact List > Add, Delete, Edit, View
  • Outbound > DNC List > Search, View
  • Outbound > Response Set > View
  • Outbound > Rule Set > View
  • Outbound > Schedule > Delete, Edit, View
  • Routing > Queue > Search, View
  • Scripter > Published Script > View
  • Telephony > Plugin > All
• Call Transcript
  • Recording > Recording > View
  • Analytics > Conversationdetail > View
  • Externalcontacts > Contact > View

For more information, see Create an OAuth client and Configure authentication.

For more information about the integration, see About Genesys Cloud for Salesforce.