Permission sets in Salesforce are also a collection of settings and permissions that determine users’ access to various tools and functions on the platform.
Permission sets enable extra permissions for specific users and override the profile.
Settings and permissions available in permission sets are also found in profiles but permission sets extend the functionality of users without changing their profiles.
Types of Permission Sets
Salesforce offers several types of permission sets to help your users achieve their business goals.
Custom Permission Set:
Created by administrators based on tasks that users perform. Users who perform the same tasks but have different job functions.
Integration Permission Set:
Salesforce offers specific integrations. Only certain permission types can be modified by your org. The editability is based on the specific integration’s use case. Integration permission sets define the scope of data access by Salesforce integration-related features and services. Depending on the integration features, integration permission sets can:
- be predefined by Salesforce but aren’t editable by your org.
- have no initial permissions and be fully controlled by your org.
- come with on-premises permissions but can be modified by you.
Managed Permission Set:
Installed from a managed package and has the package namespace.
Session-Based Permission Set:
Allows functional access only during a predefined session type, we have limited access to functionality for more security. Or sometimes limit access to equipment to users in certain roles.
Standard Permission Set:
It Includes common permissions for a feature associated with a permission set license. Using standard instead of custom permission sets saves time and facilitates administration. Users who require permissions for a permission set license.
Permission Set Control
- Object Permission
- Field Permission
- User Permission
- Tab Settings
- App Settings
- Apex class access
- Visualforce Page Access
There are a couple of ways to use the Permission Set in Salesforce:
1. To grant access to custom objects or entire apps.
2. To grant permissions-temporarily or long term-to specific fields
Permissions are additive which means we can’t remove a user’s existing permissions by assigning a permission set we can only add permissions.
To limit access for a user or group of users, ensure that their base profile as well as any of their permission sets limits this type of access.
It is not mandatory to give the license to the permission sets while creating it, but once the license is assigned it cannot be changed.
The following steps are assign a permission set:
Step1: Go to setup and find permission sets in Quick find box and click New.
Step 2: In new we need to update all required fields and save the button.
Step 3: Select “ Assigned App” and map available apps to Enable apps and save.
Step 4: Click Object settings and select the Object as required.
Step 5: Click edit option and update the permissions as required and then save the page.
Step 6: Go to the permissions set homepage and click Manage assignments and click “ Add assignments”
Step 7: Select any user to assign and then click “ Next” button to assign
Step 8: The assignment has been completed successfully.