After getting knowledge about Profiles and Roles in Salesforce, this time to introduce various Permission Sets and security in Salesforce. Permission sets are required to control visibility, read, write, delete, and updates rights in Salesforce. These are considered as the secondary profiles in the Salesforce instance. Unlike the profiles, users can be assigned multiple permission sets in Salesforce. In this article “Permission sets in Salesforce” we will discuss different permission sets with examples and how to create them.
What is Permission Sets?
The Permission sets are very similar to Profiles and also considered as the secondary Profiles in Salesforce. It is the collection of various permissions and settings in Salesforce. The only difference between Profiles and Permission Sets is about user assignment. A user can be assigned only a single Profile while the same user can be assigned multiple Permission sets at a time.
A Permission sets is used to extend the functional access to various tools and functions without changing the user’s profile.
As an administrator, Profiles and Permission sets both can be used for managing various objects, fields, users, tabs, apps and Apex classes, etc.
Difference between Permission sets and Profiles
The basic difference between Profiles and Permission sets is about access and permissions granted to users. The profile is used to provide minimum permissions and access to the user while Permission sets are used to grant additional access to the same user.
Let’s understand with an example of our organization’s basic functions. When a user onboard any organization, we need to assign a profile with normal permissions and access that required for their job operation. But when this user works on some special project which required additional access and permissions, you need to create a Permission set with required accesses and assign it to that user.
How to create Permission sets in Salesforce?
We can create permission sets or clone too. There are a few steps to create Permission sets in your Salesforce instance as follows:
- Login to your Salesforce account.
- Go to the Setup menu and click on it.
- Enter Permission sets in the Quick Find Box and select Permission sets under the users section.
- Click New tab
- Select the type of users who will use this permission set by selecting the specific user license from the drop-down menu.
However, you can select various licenses associated with the users (CPQ integration user, chatter external, chatter-free, identity, Salesforce, CRM user, Sales Console user, Sales user, and SalesforceIQ inbox user, etc.) from the drop-down menu. If you don’t need any specific user license then select “None”.
Suppose, we are going to create new permission sets for managing chatter groups with a Salesforce user license. We need to fill in the shown details in the given fields by selecting the appropriate user license.
After filling these fields click the save button. It will redirect you to the Permission sets detail page. Now you can customize these Permissions and assigned them to specific users.
How to assign Permission sets to a single user?
As an Administrator, you can assign as well as remove permission sets for a single user on the user detail page. To assign and remove Permission sets, we need to follow below steps:
- Log in to Salesforce account
- Go to the Setup menu
- Enter Users in Quick Find Box and select Users.
- Select the user for which you want to assign Permission sets (Click on User’s name from the list of users).
- Click Permission Set Assignment from the list as shown in the image.
- Click Edit Assignment
- Add or remove permission sets from the available list of Permission sets.
- Click Save button
How can you deploy Record Types in Permission sets?
We can assign custom Record type in Permission sets by following simple steps as given below:
- Login to your Salesforce account
- Go to the Setup menu and click on it.
- Enter the Permission sets in the Quick Find Box and select Permission sets under the users section.
- Select any Permission sets or create new Permission sets.
- Click Object Setting on the Permission set overview or Permission sets detail page. However, you can also search for the desired setting in the Quick Find Box.
- Click the desired Object from the list. Here, we have selected the Account object in the below image.
- Click the Edit button.
- Select the Record Type which you want to assign to this Permission sets and then click Save.
Note: You can Edit various Tab settings, enable Object Permissions such as Read/Write/Edit/Delete/View all/Modify all, and grant Read/Edit access to various Field Permissions.