Loading

Installing an AppExchange App in a Sandbox When Production Login Lacks Administrator Permissions

Дата публикации: May 14, 2026
Описание

When installing an AppExchange app into a Sandbox, Salesforce requires authentication using a production org login where the user's profile is either System Administrator or has the "Download AppExchange Packages" permission. It is not possible to authenticate using a Sandbox login (test.salesforce.com) during the AppExchange installation flow.
If the user's production org login does not have the required permissions, the following errors occur:
Error 1 — When attempting to log in with a production org without the required permission:

"Oops! Looks like you don't have permission to install apps. To keep your Salesforce secure, only system administrators have permission to install apps."

Error 2 — When manually changing the login URL to test.salesforce.com:

"We've Encountered a Problem. We've encountered an intermittent problem. Please click back on your browser and try again."

This article describes a workaround to install an AppExchange app directly into a Sandbox without requiring System Administrator access in the related production org.

Решение

Workaround: Use an Alternative Production Org to Retrieve the Package Install URL

If the "Download AppExchange Packages" permission cannot be granted to the installing user in the related production org, use an alternative production org (such as a free Developer Edition org) to obtain the package installation URL. Then use that URL to install the package directly in the target Sandbox.

  1. If needed, sign up for a free Developer Edition org to use as the alternative production org.
  2. Log out of the AppExchange in your browser.
  3. Navigate to the AppExchange listing and begin the installation process, entering your alternative org's login credentials. When prompted for where to install, select "Install in production".
  4. After clicking "Confirm and Install," you are redirected to a login page. The URL in the browser address bar contains the package ID — a string beginning with 04t, for example: `<REDACTED>
  5. Copy the package ID from the URL (the value beginning with 04t).
  6. Construct the direct package install URL by substituting the package ID: /_ui/core/mfpackage/install/InstallPackageLandingPage?p0=&src=U
  7. Log out of all active Salesforce sessions, then log in to the target Sandbox where you want to install the package.
  8. While logged in to the Sandbox, paste the constructed install URL after salesforce.com in your browser's address bar.
  9. Proceed with the package installation.

Important: Ensure you are only logged in to the correct target Sandbox before pasting the install URL. Installing in the wrong org cannot be undone easily.

When the "Download AppExchange Packages" Permission Is Missing in the Sandbox

If the installing user does not have the "Download AppExchange Packages" permission in the target Sandbox, the installation will fail with:

"This app can't be installed. Unable to Access the AppExchange — You have attempted to create, upload, or download an AppExchange package without the necessary permissions."

In this case, a Sandbox administrator must grant the "Download AppExchange Packages" permission to the user via their Profile or a Permission Set before retrying the installation.

Дополнительные ресурсы

Install a Package
Sign up for a free Developer Edition

Номер статьи базы знаний

000387841

 
Загрузка
Salesforce Help | Article