Salesforce Stack Exchange is a question and answer site for Salesforce administrators, implementation experts, developers and anybody in-between. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Anyone know if it's possible to deploy profiles/permission sets via Eclipse or an Unmanaged Package that contain object & field permissions for 3rd party managed objects?

I'm trying to deploy a profile from one org that contains object/field permissions for objects that are part of a managed package (not a package that I have access to, but that is from a 3rd party vendor).

The problem that I'm running into is that the profile/permission set XML files in eclipse don't even contain the object/field permissions for these managed objects, they only contain the object/field permissions for standard Salesforce objects & custom unmanaged objects.

I'm able to deploy the profiles/permissions sets to another org but only the premissions for standard & custom unmanaged objects get migrated... none of the permissions for the 3rd party managed objects move.

share|improve this question
up vote 5 down vote accepted

This is possible, provided your package.xml is configured correctly. From the directions at

Using Field Trip as an example, in my package.xml:

<?xml version="1.0" encoding="UTF-8"?>
<Package xmlns="">

In the profile XML retrieved I see:

share|improve this answer
Mike, were you able to change the package.xml file in the Eclipse IDE, and then use the 'Deploy to Server' wizard in Eclipse? Or did you have to use Ant for what you showed above? – DallasDeuce Nov 29 '12 at 21:37
I used Ant to produce this. – Mike Chale Nov 30 '12 at 1:02
Great, thanks Mike. I'll do some testing and let you know if I hit any snags, appreciate your help! – DallasDeuce Nov 30 '12 at 4:52

This is absolutely possible. What is not possible is to retrieve or deploy managed components like a managed permission set. These components are considered protected and immutable.

However, by retrieving the managed CustomObject member metadata along with your own custom profile/permission set metadata, as in @Mike Chale's example, you will have access to set permissions on your custom profile/permission set metadata.

Just go into your .Profile settings file in eclipse and modify the permissions. There should be no reason why this isn't possible deploying by eclipse but if you want to test this, try it out deploying using the utility - just go to migration >> deploy to deploy your custom zip file.

One way to think of it is: managed components are owned by the ISV/package publisher, but since custom profiles and permission sets in your org are owned by you, you can always modify them (as long as you include the publisher namespace prefix in your deployment) including managed component permissions.

share|improve this answer
Thanks Adam, that's really helpful. Will do some testing and post back if I run into issues. – DallasDeuce Nov 30 '12 at 4:51

I was able to successfully deploy the object & field permissions for managed objects through eclipse but I'm having trouble moving the following:

  • Apex Class permissions for managed apex
  • VisualForce page permissions for managed apex
  • Tab Visibility (running into problems with Permission Set tab visibility - seems as though eclipse doesn't allow you to deploy tab visibility at all in eclipse)
  • App Assignments

Do you know if it's possible to deploy these types of permissions for 'Permission Sets' via eclipse or ant?


share|improve this answer
I see that you're a new user so I'll be gentle :) StackExchange is a bit different to other sites in that it's not a forum but Q & A. This answer you have posted is not really an answer, but it's also not really a comment either. What I would suggest is that you edit your question with these findings to make it easier for someone to answer your question. – Daniel Blackhall Dec 13 '12 at 23:56

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.