What Is Permission Sets In Salesforce (Object Level Security)?
Permission sets in Salesforce are also a collection of settings and permissions that determine users’ access to various tools and functions on the platform.
Settings and permissions available in permission sets are also found in profiles but permission sets extend the functionality of users without changing their profiles.
Use permission set to grant additional access to specific users on top of their existing profile permissions, without having to modify an existing profile, create new profiles, or grant an administrator profile where it’s not necessary.
Permission Set Control
- Object Permission
- Field Permission
- User Permission
- Tab Settings
- App Settings
- Apex class access
- Visualforce Page Access
There are a couple of ways to use the Permission Set in Salesforce:
1. To grant access to custom objects or entire apps.
2. To grant permissions-temporarily or long term-to specific fields
Permissions are additive which means we can’t remove a user’s existing permissions by assigning a permission set we can only add permissions.
To limit access for a user or group of users, ensure that their base profile as well as any of their permission set limits this type of access.
It is not mandatory to give the license to the permission sets while creating it, but once the license is assigned it cannot be changed.
Permission Sets Expiration In Salesforce
Set assignment expiration dates and assign permissions that expire to users via permission sets
You can specify the expiration date with 1 day, 7 days, 30 days, 60 days, and a custom date from the permission set assignment.
Difference Between Profile And Permission Sets
| Profile | Permission Sets |
| Profiles have the most restrictive settings and permission a user assigned to this profile should have. | Permission Sets extend the access settings and permissions provided by the profile. |
| A user can have only one profile assigned. | Users can have more than one permission set. |
| Profiles are restrictive. | Permission sets are additive. |
| Every user must be assigned a profile. | Every user doesn’t need to have a permission set. |
