We have about 6 users at our company who need a similar set of CRUD permissions against our Salesforce org.
1 of those users is employed in a lesser capacity than the other 5 and therefore shouldn't be allowed to access our Salesforce org from home.
I've already developed a Profile for the 5 users that fits what they need to do in our Salesforce org perfectly.
I've been asked to make the 6th user "just like the other 5, but not able to work from off-site."
Although duplicating a profile is easy, keeping similar profiles' CRUD permissions in sync over time is a nightmare.
If there's any way to just have 1 profile, but give one of its users additional IP address (and possibly work-hours) restrictions, I'd like to know about it!