A permission set is a collection of settings and permissions that give users access to various tools and features. Permission sets extend users' functional access without changing their profiles.
The settings and permissions available in permission sets are also found in profiles, but permission sets extend users' capabilities without changing their profiles. Users can have only one profile, but depending on the Salesforce edition, they can have multiple permission sets. You can assign permission sets to different types of users regardless of their profiles. Create permission sets to grant access between logical groupings of users regardless of their primary job function. For example, let's say you have several users who need to delete and convert leads. You can create a permission set based on the tasks these users need to perform, and include the permission set in permission set groups based on job functions. If permission is not enabled in a profile but is enabled in a permission set, users with that profile and permission set have permission. For example, if password policy management is not enabled in a user's profile, but is enabled in one of their permission sets, they can manage password policies.
There are Different Types of Permission Sets
Custom Permission Set
- Created by administrators based on tasks performed by users.
- Users who perform the same tasks but have different job functions. For example, sometimes users who create and edit contracts are in separate departments. Create a permission set for tasks, and then include the permission set in the appropriate permission set groups based on the task's capabilities.
Permission Set for Integration
- Offers Salesforce for specific integrations. Your organization can only modify certain types of permissions. Modifiability is based on the specific use case of the integration.
- You connect to the cloud to exchange data with integration partners. Integration permission sets define the scope of data access using Salesforce integration-related features and services.
Don't forget to check out: Users and Profiles in Salesforce - Learn All About It
Depending on the integration features, integration permission sets can:
- be predefined by Salesforce, but cannot be modified by your organization.
- have no initial permissions and are fully under your organization's control.
- they come with local permissions, but you can modify them.
Set of Managed Permissions
- Installed from a managed package and has the package namespace.
- Package developers include permissions to access features in a managed package. Subscriber organizations cannot modify permissions in these permission sets.
Set of Session-based Permissions
- Allows functional access only during a predefined session type.
- Restrict access to features for greater security. Or sometimes you restrict access to equipment to users in certain roles. For example, let's say your organization has a custom facility called a Conference Room. A mobile application called Conference Room Sync has access to read and update the object. You can create a set of permissions that will allow object updates only if the mobile application connected to Conference Sync generates a user session.
Standard Permission Set
- Includes common permissions for the feature associated with the permission set license. Using standard permission sets instead of custom ones saves time and makes administration easier.
- Users who require permissions for a permission set license.
Steps to Create Permission Set
- From the Settings menu, enter Permission Sets in the Quick Find box, then select Permission Sets.
- Click New.
- Enter the permission set information.
- Select the user types for the permission set.
When you create a permission set, you select a specific user or permission set license. If only users with one type of license can use the permission set, select the license that is associated with the users. For example, to create a set of permissions for users with:
- Salesforce license, select Salesforce. You can enable permissions only allowed in the Salesforce license.
- Identity Connect permission set license, select Identity Connect. You can enable permissions only allowed in the Identity Connect license.
- different licenses, select None. If you do not select a specific license, you can assign the permission set to any user whose license allows the permissions that you enable in the permission set. For example, to assign a permission set to users with a Salesforce license and users with a Salesforce Platform license, select None.
Check out an amazing Salesforce video tutorial here: What are Permission Sets (Object Level Security) in Salesforce?
Assigning Permission Set to a User
- In Settings, type Users in the Quick Find box, then select Users.
- Select a user.
- In the list of related permission set assignments, click Edit Assignment.
- To assign a permission set, select it under Available Permission Sets and click Add. To remove a permission set assignment, select it under Enabled permission sets and click Remove.
- Click Save
Permission Set Controls the Following:
- Object Permission
- Field Permission
- User Permission
- Tab Settings
- App Settings
- Apex class access
- Visualforce Page Access