Profiles, Permission Sets & Permission Set Groups
Permission Set Groups
Allow any number of Permission Sets to be bundled together. Can be individually assigned to Users just like Permission Sets
Permission Sets
Like miniature Profiles Can be assigned to multiple Users, and are much more agile than Profiles Permission Sets are not a general-purpose replacement for Profiles. They don't include information about page layout assignments, App visibility, record type visibility, or login hours
Profile Object Access
C = Create R = Read E = Edit D = Delete You can mix and match these Found in "Object Permissions"
Profiles
Each user in your org has ONE Profile Profiles are designed to group users into functions, for examples "Sales", "Marketing", or "Support" Profiles control: **Object access **Field-level security (which fields are visible or editable) **Page layouts **Record types **Tabs **Apps (which Apps a User can access and which is their default App) The most important Profile in the org is "System Administrator". Users in this Profile have absolute access to do anything. In addition to CRUD, they will have "View all" and "Modify all" selected for each object. Tye will also have ultimate permissions, namely "Modify all data", "Customize application" Found in "Administrative Permissions"
Profile - Page Layouts
Page layouts determine which page a user will see for each object
Key Things to Remember
Profiles = what a user can DO in Salesforce Roles = what a user can SEE in Salesforce Permission Set = a way to extend what a user can Do (like a Profile but smaller) Permission Set Group = a bundle of permission sets ROLES SEE, PROFILES DO
Profile Permissions
Profiles control various permissions in Salesforce such as the ability to convert Leads or create reports Found in "Administrative Permissions" and "General User Permissions"
Profiles, permission sets and permission set groups VS Roles and role hierarchy
Profiles, permission sets and permission set groups work together to determine what Salesforce users can do inside Salesforce Roles and role hierarchy control what users can see inside Salesforce
Profile - Record Types
Record type settings control which record types a user has access to and which record type is their default
Profile Security
Session Settings.- determines when a session will time out after a period of inactivity Password Policies - such as how often passwords expire or the minimum password length Login Hours - prevents users from logging in outside of specific hours Login IP ranges - determines where users can log in from
Profile - Fields
Similar to page layouts, we can also control field access from the Profile
Standard Profiles vs Custom Profiles
Standard Profile permissions CANNOT be modified. Standard Profiles can be CLONED
Profile - Tabs
Tab settings are used to control which tabs are visible to users. This controls whether or not they see a tab in its associated App or within the App Launcher
Profile - Apps
Within a profile, you can determine which Apps are available for a user to select and which App is their default.
