Sarah manages Peakline's sales team, so she shares Jason's profile. But she also needs to delete duplicate accounts, and Jason shouldn't. Instead of building a whole new profile just for her, Jay uses a permission set.
What a permission set is
A permission set gives users extra access, like object, field and user permissions, on top of their profile.
| Profile | Permission set | |
|---|---|---|
| How many per user | Exactly one | As many as needed |
| What it does | Sets the defaults | Adds access |
Permission sets only add access. They never take it away.
Making one for Sarah
- In Setup, open Permission Sets and click New.
- Name it Delete Accounts and save.
- In Object Settings, open Accounts, turn on Delete, and save.
- Click Manage Assignments and add Sarah.
Jason's access stays the same.
Permission set groups
As Peakline grows, a sales manager might need several permission sets. A permission set group bundles them together, so it matches a persona, like Sales Manager. Jay assigns the group once, and the user gets every permission set inside it.
Recap
- One profile per user, but many permission sets.
- Permission sets only add access.
- Permission set groups bundle them for a persona.
Now you try
In your org, create a permission set called Delete Accounts, turn on Delete for Accounts, and assign it to yourself. Reply DONE in the video's comments, or STUCK and say where.