An administrator is planning to use Data Loader to mass import new records to a custom object from a new API. What will the administrator need to do to use the Data Loader?

While necessary permissions for object and record access are required, the immediate challenge for Data Loader authentication from an untrusted IP is the security token, not just broader permission sets.

Simply appending a security token assumes the administrator knows the current valid token; if not, resetting the password is the prerequisite step to obtain one.

The Data Import Wizard is a separate, browser-based tool with different capabilities and limitations than Data Loader, which is typically used for more extensive or custom object imports.

When using Data Loader from an untrusted IP address, a security token must be appended to the user's password for successful login. Resetting the password is the standard way to generate a new security token if one is unknown or has expired.