Is there a tool(document) which decides if you have to create a new profile for the user or create a permission set and use existing profile. I would like to know for new user provisioning, once you get determine the access needed, is there a tool, which states "Create Permission set" and not a new Profile? I know this appears to be a stupid question. But how can we avoid Profile Proliferation, by guiding the admin, to reuse the existing Profile or create a new profile, if the permission set cannot solve the issue. Is there a decision tree document, which can assist the admin? Like-- Number of Users, access to what objects?, Reusing the existing profile etc etc
There's nothing that exists like this in standard Salesforce. It's one of those things that you have to document internally. I've used decision trees at my last company because there was a general concern about creating too many profiles to manage.
Another thing that you can do is create a permission menu. Create a menu that has groups of permissions for objects/permissions to cover 90% of your users and then when they want to create a new user the hiring manager chooses from the menu. By forcing users to choose from a menu of permissions you're shutting the door on one off types of access which avoids the need to create a bunch of psets.