function readOnly(count){ }
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
+ Start a Discussion

Any Way of Comparing Profiles??



Can anybody suggest some way of comparing profiles aprat from Enhanced Profile management, which has its limits.







In salesforce Profile is a standard object .you can execute the Soql query on the profile .


For example try the below code snippet in your system debug.


list<profile >p=[Select p.UserType, p.UserLicenseId, p.SystemModstamp, p.PermissionsViewSetup From Profile p];




Did this answer your question? If not, let me know what didn't work, or if so, please mark it solved. 

I have already cheched this. It does not contan all the permissions. Is there some other table which has all permisions for particular profile. Plz let me know. Thanks
Static DevStatic Dev

If you have the Snapshot app it has a easy way to compare and see each and every profile.




I get this question quite a bit and I wish there was an 'easy' button to push that could give you the information your looking for.


The reality is that the concept of 'easy' doesn't scale nearly as well as a user's profile or permission set.


Take an org with 100 custom objects, each object with approximately 50 fields. Add on average 2 page layouts per object with a record type a piece. Include 10 apps, 100 apex classes and 100 visual force pages. For any given profile or permission set, that means there are 11,000 permissions that can be configured ((100*6) + (100*50*2) + (100*2) + (200)) with an almost infinite number of possible combinations.


And that's not even everything that a profile can contain! Add to that 10 profiles you want to combine and compare across 100 users with 20 add-on permission sets and you have a proverbial needle in the haystack.


So when it comes to administering profiles and permission sets, it's really about finding the right tool for the job. There are many tools available to manage these profiles and permission sets, but no single tool I would recommend because every tool begins with a fundamental question, "what do I want to know" or "what do I want to do"?


Examples of questions I frequently hear include:

1. Who has Modify All Data?

2. Does Sam Bradley have the right to click on this tab or view that Visualforce page?

3. What's different between Sam Bradley and Mike Liescher?

4. What's different between the Standard User and the Basic profiles?

5. What's different between the PTO Manager and PTO Administrator permission sets?

6. How can I assign this permission set to 100 new users?

7. How can I remove the Modify All Data permission from any users with the Basic Profile or have North American Managers in their title

8. How can I automate the assignment of the API Enabled permission set anytime a user becomes a manager and remove it if it no longer applies?

9. How can I disable the View All Data permission from all profiles, add it to a single permission set, and assign it to all users who originally had the profile with the permission?

10. How can I organize my permission sets the same way I organize my business or distribute apps to people?


Each question maps to a specific task that I am performing as an administrator. Now combine each task with the concept that each user, profile, and permission set can contain an infinite number of permission and settings combinations and you have the need to find the right tool for the right job to answer the right question. And each task may map to a different tool or API that can be used to answer it.


There are some great resources to help answer specific questions. For instance:

1. I did a great dreamforce 2012 session with Sherrie Smith from Paychex Inc where we outlined some techniques comparing and managing profiles:

2. I did another great dreamforce 2012 session with some of my team members and partners where we dug into some of the great tools you can build on top of our API:

3. One of those tools included a graphical interface for comparing users, profiles, and permission sets but looking specifically at their user permissions: by John Brock

4. Check out: Using SOQL to determine your user's permissions ( )

5. Probably the best tool for a more extensive comparison of profiles is the IDE native compare ( ). Mike Chale's comment about using the ANT Migration Tool is another manfiestation of this.

6. There are some other great open resources that take the MdAPI XML and parses it to show differences like Quick Diff ( ), or Model Metrics Diff Dog - Setting up and using DiffDog for ( )

7. There's also a pretty cool general setup comparison tool you can check out:

There are also some great AppExchange Packages including:

1. The Permissioner by Arkus: ( )

2. Snapshot by Dreamfactory: ( )


The key part here really is identifying what you want to compare and why. The why part is pretty important since once you know how profiles are different, you'll want to do something with that information.

Rajiv BhattRajiv Bhatt
I have developed a chrome extension that can compare (profiles from same or different orgs) and highlight all the differences. You might want to check it out:

Extension available @

Video that shows how this could be used:

let me know if that helps.
Aamir MaqsoodAamir Maqsood
Hi Guys,

I have found a very easy solution to this. Here is a tool to compare upto 4 users, 4 profiles, 4 permission sets permissions within the same organization:

Please mark my answer is best if it does solve the problem. 

Thanks and Regards.

I need to compare profiles from different orgs(sandboxes). I tried using the Profile Comparator for Salesforce chrome extension as suggested by Rajiv Bhatt. But due to some know issue, it did not work for me.

I also tried as suggested by Aamir Maqsood above which works perfectly for profiles in same org. But since I want to compare profiles from different orgs, Perm comparator is of no use to me.

Any help is appreciated.


Rajiv BhattRajiv Bhatt
Hi Sudha,

I released a patch on 9th Feb (version which has the fix for all the open issues. If chrome has not auto-upgraded this extension then I would request you to uninstall and install it again. Request you to please try again and let me know if you still face any issues.

I would be more than happy to help you resolve this.

Rajiv Bhatt
Suddha Swattwa MukhopadhySuddha Swattwa Mukhopadhy
Hi @@Rajib and @@Aamir Maqsood ; 

Can you have anything that does comparison between orgs - say for permission sets in particular.
Omar VillasmilOmar Villasmil
There is a tool that will allow you to compare profiles, and in general the metadata. Check out this post: Compare Profiles, Permission Sets, Picklists and more (
Michael Paisner 7Michael Paisner 7
You should check out Security Zen. (
Let's you compare profiles and permission sets within an org and between orgs.  It also let's deploy security from one org to another.
rishabh rathor 28rishabh rathor 28

You can try BOFC, a native application, that cn perform bulk metadata operations in few click. Here below the link if its one feature compare multiple profiles -