Apex Code Development You need to sign in to do that
Don't have an account?
Laura Gil permission set group vs profile
Hi all,
Happy New Year!.
Here I am with a new question. A colleague of mine said best practice is to use Permission Set Groups and Permission Sets instead of Profiles. We are deploying through CI/CD (GIT) and he said there could be problems if using profiles.
I would appreciate if experts using Permission Set Groups could tell me from their experience. Is that so, it is better to use them instead of profiles?. In which cases it is better to use them?
Happy New Year!.
Here I am with a new question. A colleague of mine said best practice is to use Permission Set Groups and Permission Sets instead of Profiles. We are deploying through CI/CD (GIT) and he said there could be problems if using profiles.
I would appreciate if experts using Permission Set Groups could tell me from their experience. Is that so, it is better to use them instead of profiles?. In which cases it is better to use them?
Permission Sets: In these Permission sets we define the access level of the user. Generally, we determine what a user can do in the applications. These are used to grant additional permission to a user.
Profiles: In Object level Security, Profiles are assigned to the user by the system administrator. A profile can be assigned to many users where a user can have only one Profile.
The key difference between the two is that the Profile is the user's base set of permissions and all users are assigned to one. ... Profiles can be used to give or take away permission from the users assigned to them. Permission Sets can only give or extend permission to the users assigned to them.
I think this a good example to understand better:
The profile is like a Key to House
Permission sets are like keys to individual Rooms.
So if this profile is assigned to the user means he can enter the house but can’t enter the rooms
Until and unless permission sets are assigned to the user he can't enter the rooms
For further information check the below discussion which has examples too,
https://salesforce.stackexchange.com/questions/119220/exclusive-differences-profiles-vs-permission-sets/119297#:~:text=The%20key%20difference%20between%20the,users%20are%20assigned%20to%20one.&text=Profiles%20can%20be%20used%20to%20give%20or%20take%20away%20permission,the%20users%20assigned%20to%20it.
Let me know if it helps you and close your query by marking it as solved so that it can help others in the future.
Thanks.
All Answers
Permission Sets: In these Permission sets we define the access level of the user. Generally, we determine what a user can do in the applications. These are used to grant additional permission to a user.
Profiles: In Object level Security, Profiles are assigned to the user by the system administrator. A profile can be assigned to many users where a user can have only one Profile.
The key difference between the two is that the Profile is the user's base set of permissions and all users are assigned to one. ... Profiles can be used to give or take away permission from the users assigned to them. Permission Sets can only give or extend permission to the users assigned to them.
I think this a good example to understand better:
The profile is like a Key to House
Permission sets are like keys to individual Rooms.
So if this profile is assigned to the user means he can enter the house but can’t enter the rooms
Until and unless permission sets are assigned to the user he can't enter the rooms
For further information check the below discussion which has examples too,
https://salesforce.stackexchange.com/questions/119220/exclusive-differences-profiles-vs-permission-sets/119297#:~:text=The%20key%20difference%20between%20the,users%20are%20assigned%20to%20one.&text=Profiles%20can%20be%20used%20to%20give%20or%20take%20away%20permission,the%20users%20assigned%20to%20it.
Let me know if it helps you and close your query by marking it as solved so that it can help others in the future.
Thanks.