If you want to control any type of data access then the easiest way is to assign permission on that specific object. Objects can be leads, records and many more things. Well with this permission set on an object you can control whether the user can view, edit or delete or perform any action of that object. Permission sets can be one or more than one as per the requirements. Permission on the object can be set with the help of a profile or permission set.
- Every user has their own specific profile, and that profile helps to know which and what object they can assess. It also helps to decide which type of action can be performed on that object record.
- With the help of Permission sets, you can grant additional permissions and access settings to a user.
Most of the time or you can say that every time Profile is used to Restrict Access. Profiles only have the details of which data and what a user can do and access. Profile in itself is a collection of permissions and settings.
- The profile setting of any user helps determine what a user can see, like some tab, app, fields or records.
- The things which a user can see with the help of settings, permission sets help the user to perform an action on that object records, like create, edit, delete.
Don't forget to check out: Generate More Leads With Salesforce's Data.com
In Salesforce there are different types of standard profiles available and some of them are:-
- Standard User
- Marketing User
- Contract Manager
- System Administrator
- Minimum Access - Salesforce
The standard profile comes with a default permission set, this permission set is for all the standard objects available on that profile. As an example we can say that a normal Salesforce user can only have the access to read-only, the user cannot create anything. But standard profile users can perform read as well as create records. The User with a profile with System Administrator have the greatest access, they have the ability to even configure and some time to customize Salesforce.
The User with System Administrator profile has some specific permission set with it, these are:-
- View All Data:- As a System Administrator profile user you can access all the data and the user can view them all.
- Modify All Data:- Well with this System Administrator profile the user get access to modify data that is to edit and delete data, and they have access to all the data available.
Create a Profile
If you want to create a profile then there are two ways, one is you can clone the existing profile and the other ways to create a new one.
Here is how you can clone the profile:-
- Go to Setup, in the Quick Find box, search for profile and click on it.
- Now, you have to decide and select which profile you want to clone, select one, and click on Clone.
- After the clone, provide the new profile name and click on the save.
Assign a Profile
Well when a profile is created, then comes the most important part, assigning the profile to the right user. So it could be done in a specific way, what role that user has, and what type of access they needed to be done intelligently.
After these, all the Permission set comes into the picture and it only helps the user to grant access. It can be done two ways:-
- Grant access to custom objects or applications.
- Grant permissions to specific fields.