top of page
Search

Why have profiles when user can just make permission sets?

  • Writer: Joshua Carter
    Joshua Carter
  • Jul 19, 2022
  • 2 min read

Updated: Jul 20, 2022

Today I am getting familiar with profiles and permission sets. Both are used to grant users specific access to perform certain task in Salesforce. Although, a user can only have one profile assigned to them, they can have multiple permission sets assigned. Assigning a permission set to a user does not eliminate their access gained through a standard or custom profile, it will only add to the access that is already in possession. Profiles that are assigned usually are associated by the license that a user has at the time. This is not the case with permission sets as the user can be assigned by certain licenses or profiles. Assigning by licenses allows anybody with that specific license to have access under those permission set. (permission set group) By profile, the single user is designated a certain permission set. Profiles can be broken into two different categories, standard and custom. Standard profiles are the "out-of-the-box" permissions that Salesforce have created by default. They cannot be edited due to this fact, but can be cloned for the purposes of creating a custom profile. Two settings are associated with standard profiles. The app setting allows permission for the specific apps and objects, while the system setting allows permission to all the apps and objects. Custom profiles are created from cloned standard profiles and are fully customizable. There is also an option to restrict cloned profiles under the User Management Settings. Enabling this option ensures that when a standard profile is cloned, only the permissions that the Org allows is accessible under that cloned profile. So, if an end user can set permission sets by license, why have standard profiles or create custom profiles? In short, standard profiles are an convenient package of permissions that are already waiting to be assigned. Likewise with the custom profiles, they are edited standard profiles that are tailor to fit the permissions a user needs at any given time. While this option is convenient for users, sometimes a single user needs a specific type of permission to accomplish a task. This is what make permission sets a desired added feature. The administrator can add that specific permission to the user without having to give permissions to other aspects that the user doesn't need.

ree

 
 
 

Comments


Post: Blog2_Post
bottom of page