Skip to main content

Questions tagged [permission-sets]

A permission-set is a collection of settings and permissions that give users additional access to objects, records, tools and features they wouldn't otherwise have through their assigned profile. In this manner, a permission-set extends a users’ functional access without making any changes to their profile. This feature allows organizations to extend access for users without additional custom profiles for unique situations or limited time periods.

Filter by
Sorted by
Tagged with
46 votes
3 answers
8k views

Salesforce bug enabled "Modify All"

Apparently, Salesforce has released a patch that implicated "Modify all" to be enabled for every single profile in some orgs. This includes standard profiles and custom as well. Yes, even standard ...
Rodrigo's user avatar
  • 1,295
32 votes
2 answers
57k views

Assigning permission set to user in apex

Is it possible? Are there any limitations to consider? I have a use case where if a certain relationship is maybe, we would assign a permission set that grants access to a knowledge base data ...
NSjonas's user avatar
  • 10.2k
27 votes
2 answers
46k views

How can I assign a permission set to a user in a test context?

I have set OWD to private and create a permission set to give access to object. We have removed all the object settings access from the concerned profile. Previously with OWD set to private, profile ...
Rohit's user avatar
  • 733
22 votes
4 answers
6k views

How to know if a field is part of a compound address field and thus is not permissionable

I am working on a class that dynamically created FieldPermissions records for a permission set. This is working fine, except when it comes to standard compound address fields. When you attempt to ...
Christian Carter's user avatar
14 votes
6 answers
29k views

Exclusive differences Profiles vs permission sets?

I understand, the differences between Profiles and Permission Sets. I just wanna ask are there some configs that make Profile or Permission Set unique. Are there things that could only be done via ...
Pranay Jaiswal's user avatar
11 votes
4 answers
63k views

INSUFFICIENT_ACCESS_ON_CROSS_REFERENCE_ENTITY: insufficient access rights on cross-reference id: []

I have a custom object Resource__c having master detail with Account object. I have Account1 created by User1 and if User2 goes to create resource on Account1 then below error is given :"...
Pravesh Mehta's user avatar
11 votes
2 answers
4k views

How is Permission Set Metadata Deployment changing in Summer '17 (API 40.0)?

Salesforce recently sent out an email entitled ATTENTION: Update to Permission Set Metadata Deployment in API 40.0 with Summer ‘17 Email contents: Product & Service Notification As an ...
Daniel Ballinger's user avatar
9 votes
2 answers
27k views

How to resolve an "Unknown user permission: SendExternalEmailAvailable" deployment error

When attempting to deploy profiles, you may encounter the error "Unknown user permission: SendExternalEmailAvailable". What does this mean, and how can you resolve it?
abd3721's user avatar
  • 2,162
9 votes
2 answers
3k views

Which Apex classes & Objects must be enabled in a Permission Set?

I'm still a bit unsure which Apex classes I have to enable in a Permission set. I guess I don't need to enable Test classes I definitely need to enable Controller and Controller extensions for ...
Robert Sösemann's user avatar
9 votes
2 answers
12k views

Get all field level permission from SOQL for an permission set

What I want to do: I am trying to create a tool in Java, which query permission sets from Salesforce Org using REST(As we do in workbench). After getting all the permission sets which field ...
वरुण's user avatar
9 votes
1 answer
329 views

Spring 22 testmethod GACK when assigning a PermissionSet to a newly-created user

If you have this testmethod: @IsTest private class NewSysadTest { @IsTest static void testSuccess() { User testUser = new User( username=UserInfo.getUserId()+'.'+ (DateTime.now()+':'+...
cropredy's user avatar
  • 71.9k
9 votes
1 answer
6k views

Deployment fails with: INVALID_CROSS_REFERENCE_KEY, You can only assign users to permission set groups that have the "Updated" status

Do CI deployments to a sandbox (Summer 21) that includes unit test code that mocks users and assigns them to a PermissionSetGroup. Unit test code has been working for months. The user mock factory is ...
cropredy's user avatar
  • 71.9k
8 votes
3 answers
1k views

Can we prove security using Apex Tests & System.runAs()?

Let's pretend I am working on a Managed Package app that is soon going to Security Review. I have used all the latest and greatest native features (I know some of them are not GA yet) like as user and ...
Robert Sösemann's user avatar
8 votes
1 answer
2k views

Managed Package Validation Error

I'm receiving the following error when uploading a managed package (during the validation stage): "Permission Set Name" references "Custom Object" that has M-D relationship with Account. This is a ...
techbusinessman's user avatar
7 votes
5 answers
26k views

Can I assign Permission set to a profile instead of user?

I knew that Permission set can be assigned to User record. But just want to know the possibility of assigning the Permission set to a Profile instead of user. I saw some query related to this posted ...
Robert Thomas's user avatar
7 votes
2 answers
3k views

How to get list list of flows accessible by a User based on Permission Sets?

In order to provide more granular and controlled access to flows, all our flows are enabled with access setting of "Override default behavior and restrict access to enabled profiles or permission sets"...
Mohan P's user avatar
  • 95
7 votes
1 answer
2k views

Packaging system permissions in permission sets

I'm trying to package 'Customize Application' system permission in a permission set. However, after installation I see that the permission set does not have the system permissions that were assigned. ...
Tan's user avatar
  • 265
7 votes
1 answer
10k views

Install for "All Users" vs "Admin Only" (Salesforce CPQ)

I've been going back and forth most of the day today with both Salesforce's CPQ Team AND our implementation partner with regard to whether or not we should install Salesforce CPQ for All Users, or ...
Morgan Marchese's user avatar
6 votes
5 answers
42k views

Possible reasons why a quick action button is not shown for a non-admin user?

I've added a "New Action" in Account / Buttons, Links, and Actions. I've added the action/button to the Page Layout and it does show for me. It runs a Lightning Component that creates a customized ...
Mac A.'s user avatar
  • 379
6 votes
1 answer
2k views

Permissions & Settings in Profile and Permission Set and its Usage

I just came across the below 2 scenario regarding the Salesforce Classic & Lightning experience Enable/Disable for a user via Profile and Permission Set once the Lightning Feature is enabled. ...
Robert Thomas's user avatar
6 votes
1 answer
5k views

Tab Settings Not Available on Permission Set

I just noticed that Tab Settings are no longer available in my permission sets in Salesforce. My Opportunities tab is defaulting to hidden for this permission set, so my users aren't able to access it....
Rochelle's user avatar
  • 417
6 votes
3 answers
295 views

Is there a more effective format for permissionsets?

Working source first, permission sets and profiles have a low "signal to noise" ratio where the signal is the content of the XML elements and the noise is the element layout and the elements ...
Keith C's user avatar
  • 136k
6 votes
1 answer
715 views

Managed Package 'Push Upgrade' with System Administrator profile privileges

When I push upgrades to organizations that have already installed my applications, new Apex Classes and Custom Fields get created by a user with the 'Package Manager Profile' even though the package ...
Vighnesh's user avatar
  • 181
6 votes
2 answers
1k views

Field permission in post install script

I want to create 1 permission set for my managed package and in that I need to assign standard Account object permission and its field permission. So here is my query : Can we assign field permission ...
Pravesh Mehta's user avatar
6 votes
1 answer
733 views

Error when creating ViewAllData PermissionSet in Apex (for test class)

I can't create a ViewAllData PermissionSet via Apex for a test class. Here is my code: PermissionSet ps = new PermissionSet(name = permSetName, label = permSetName); insert ps; List<...
DavidSchach's user avatar
  • 5,926
6 votes
1 answer
2k views

Control Managed Package Connected App Permission Set from managed code

I'd like to deploy a Canvas Connected App as part of a managed package and be able to dynamically assign users access to it via a Permission Set. The Canvas App is using the Signed Request (Post) ...
Daniel Ballinger's user avatar
5 votes
3 answers
12k views

Permission Set->Flow Access available flows is empty

I have Screen flow Unlock Record And want to set access for it to permission set But in flow access window there are no flows. Could you please help me figure out why so?
Dmitriy Bereza's user avatar
5 votes
1 answer
9k views

How to check which permission sets includes a edit permission on a field?

I have made account number as read only field, using permission sets we are giving edit access to selected users. With the time we have got redundant permission sets giving same permissions. ...
C0DEPirate's user avatar
  • 1,606
5 votes
2 answers
12k views

A good explanation for roles/profiles/permission sets and sharing

I know what each of these things are, but I have a hard time articulating it to non salesforce people. I suspect there is a tool out there that unpacks it in a visual way and makes it all more ...
Roy Moore's user avatar
5 votes
1 answer
1k views

Correctly grant access to packaged Named Credentials

My Managed Package uses External APIs and packages External Credential and Named Credential artifacts. I also have packaged a Permission Set, and I tried hard to make use those packaged Credentials. ...
Robert Sösemann's user avatar
5 votes
3 answers
2k views

SFDX Permission set assign command failing in latest version 7.84

In earlier versions < 7.84.2 sfdx force:user:permset:assign command was working fine, but in latest version it is throwing error Permission set "U" not found in target org. Do you need to ...
Amit's user avatar
  • 354
5 votes
1 answer
7k views

User licenses and Permission Set Licenses

I was wondering how those licenses work. When I have a view like: User Licenses : Salesforce 30 Permission Set Licenses : Sales User 10, Service User 10, CRM User 10 I know that permission set ...
Fabio Maturo's user avatar
5 votes
1 answer
205 views

How to get user's permission sets in Data Repeaters filters

I have custom field (multiselect picklist) on Question object, which we use to filter the displayed records in accordance with his permissoin sets. On visualforce pages it's implemented using SOQL ...
Hleb's user avatar
  • 397
5 votes
1 answer
449 views

Clone packaged permission set in Apex

As part of another question where I tried to automate the creation of a Connected App for a Managed App and were successful with many steps but failed Assign a packaged permission set to the ...
Robert Sösemann's user avatar
5 votes
2 answers
319 views

Where can I find a mapping between a profile setting label and the underlying XML tag for a profile?

I am trying to audit a profile. I have a sheet with the labels in the profile, and I have the profile XML. But there is no simple concordance between something like this: <userPermissions> &...
Scott Cromie's user avatar
5 votes
1 answer
1k views

Update permission set in managed package

I have a managed package with permission sets included. I also use custom setting objects. Permission sets userPermissions have to be set to allow CRUD on Custom Setting but this can not be included ...
Simonp's user avatar
  • 1,902
4 votes
2 answers
123 views

How to Check AsigneeId is User?

Below is the code, I would like to get only user ID not the group id for(PermissionSetAssignments permSetAssignmentObj : [SELECT AssigneeId from PermissionSetAssignments ]) { // check ...
bharath's user avatar
  • 1,724
4 votes
1 answer
4k views

Query Object Access by Profile

I have looked at the documentation and it seems the best I can do is query ObjectPermissions for PermissionSet access. Is it possible to do the same for Profile instead of PermissionSet? THANKS FOR ...
Steel Reserve 211's user avatar
4 votes
3 answers
39k views

Get List of Permission set assigned to the user

I want to get the list of permission set assigned to loggedin user. And a conditional check one that. If a user has 'TestABC' permission set assigned then boolean value should be true I am using ...
TestUser's user avatar
4 votes
1 answer
7k views

System Administrator can't access Email Templates

I have a user with the system administrator profile, and suddenly it can't see anything related to email templates in Setup/Quick Search. The user was able to use and modify them previously (just ...
mife2032's user avatar
4 votes
1 answer
296 views

Permission organisation in Managed Packages (Base+Extension)

When looking for detailed information on how the Salesforce Permission artifacts: Permission Sets Permission Set Groups Custom Permissions can be best used in Managed Packages (across Base and ...
Robert Sösemann's user avatar
4 votes
1 answer
2k views

How to change field permissions in a permission set or profile programmatically (APEX)

I've been testing out a component where one can programmatically create a field in the user object. It's being used to allow a user to check a few boxes that'll filter components in pages (using the ...
Victor Archela's user avatar
4 votes
1 answer
2k views

How to programmatically determine in APEX if a custom permission is assigned to a given permission set?

Background: I am trying to make a UI that will simplify managing assignments of some custom permissions against permission sets in my managed package. This section of the managed package would only be ...
Robert Hyatt's user avatar
4 votes
1 answer
1k views

Visualforce Tab Access?

Background I have a List Custom Setting which I want to expose to a few managers. However, I do not want to give them Customize Application permission, so I created a Visualforce Page that enables ...
Adrian Larson's user avatar
  • 150k
4 votes
2 answers
828 views

When do we need to use Apex Class permissions

My colleague and I were reviewing the Apex Class Security Overview. Per our understanding of the page, if a user does not have permission to access VisualForce page's controller, he should not be ...
Brian Kessler's user avatar
4 votes
1 answer
2k views

Managed Package Permission Set missing permissions

I've created a permission set and included it in a 2nd generation managed package. However, when I install or upgrade the package some of the permissions I've assigned remain unchecked. These include: ...
jonny-harte's user avatar
4 votes
2 answers
2k views

How to set permission set license to list of users?

I have a list of 6000 users (from different profiles nearly 15 profiles). I need to set the Permission set license to all users. Actually, we can assign a license to individually as below But i ...
Frank's user avatar
  • 423
4 votes
3 answers
2k views

Assign permission set to Automated Process User causing error "CUSTOM_TAB_LIMIT_EXCEEDED"

I'm having trouble assigning a permission set to the Automated Process User. I followed this guide from UnofficialSF, which worked for me before, but for some reason it's not working now for this Org. ...
Jorge Ortega Traverso's user avatar
4 votes
1 answer
1k views

Do additional Permission Sets reduce Salesforce Performance?

I have hundreds of different functionalities setup in Salesforce each with its own Permissions Set for various privleges (FLS, Class access etc), given to various roles across the business. I wish to ...
TheArchitecta's user avatar
4 votes
1 answer
239 views

Fine-grained app licensing using FMA and Permission Set Groups

Salesforce.com own apps are licenced using a fine-grained hierarchy of user licenses and add-on licences where each license has costs and restricts what I can do in an app. As an ISV selling Managed ...
Robert Sösemann's user avatar

1
2 3 4 5
11