Is it possible to package and ship permission modifications to the System Administrator profile in a Managed Package or not?

If not, am I right in assuming permissions should be shipped as a Permissions Set or custom Profile?

2 Answers 2


I do not recommend using Custom Profiles in managed package (except if you are distributing the app as OEM app) as it requires a Mapping during installation which is an additional step that admins may miss.

Permission sets are easier to build and manage.

You can find some best practice here:


No, you can't modify the System Administrator profile.

Yes, custom Profile or Permission Set for managing the perms your package needs.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .