Profiles, Permission Sets & Permission Set Groups

Permission Set Groups

Allow any number of Permission Sets to be bundled together. Can be individually assigned to Users just like Permission Sets

Permission Sets

Like miniature Profiles Can be assigned to multiple Users, and are much more agile than Profiles Permission Sets are not a general-purpose replacement for Profiles. They don't include information about page layout assignments, App visibility, record type visibility, or login hours

Profile Object Access

C = Create R = Read E = Edit D = Delete You can mix and match these Found in "Object Permissions"

Profiles

Each user in your org has ONE Profile Profiles are designed to group users into functions, for examples "Sales", "Marketing", or "Support" Profiles control: **Object access **Field-level security (which fields are visible or editable) **Page layouts **Record types **Tabs **Apps (which Apps a User can access and which is their default App) The most important Profile in the org is "System Administrator". Users in this Profile have absolute access to do anything. In addition to CRUD, they will have "View all" and "Modify all" selected for each object. Tye will also have ultimate permissions, namely "Modify all data", "Customize application" Found in "Administrative Permissions"

Profile - Page Layouts

Page layouts determine which page a user will see for each object

Key Things to Remember

Profiles = what a user can DO in Salesforce Roles = what a user can SEE in Salesforce Permission Set = a way to extend what a user can Do (like a Profile but smaller) Permission Set Group = a bundle of permission sets ROLES SEE, PROFILES DO

Profile Permissions

Profiles control various permissions in Salesforce such as the ability to convert Leads or create reports Found in "Administrative Permissions" and "General User Permissions"

Profiles, permission sets and permission set groups VS Roles and role hierarchy

Profiles, permission sets and permission set groups work together to determine what Salesforce users can do inside Salesforce Roles and role hierarchy control what users can see inside Salesforce

Profile - Record Types

Record type settings control which record types a user has access to and which record type is their default

Profile Security

Session Settings.- determines when a session will time out after a period of inactivity Password Policies - such as how often passwords expire or the minimum password length Login Hours - prevents users from logging in outside of specific hours Login IP ranges - determines where users can log in from

Profile - Fields

Similar to page layouts, we can also control field access from the Profile

Standard Profiles vs Custom Profiles

Standard Profile permissions CANNOT be modified. Standard Profiles can be CLONED

Profile - Tabs

Tab settings are used to control which tabs are visible to users. This controls whether or not they see a tab in its associated App or within the App Launcher

Profile - Apps

Within a profile, you can determine which Apps are available for a user to select and which App is their default.