Permission sets so in the previous session we understood about the profiles.
What up profiles what role the importance of profiles.
Why do we creep create profiles and sense ZOG Are we completely discussed about profiles.
Now let's discuss about the next concept that this permission sits permission sets.
As you know it also falls in the first level of access that is the object level access of our sales
for security Martin they've already discussed about profiles.
Now let's discuss more about permissions 6
submission sets as the name says it is a set of permissions.
Sometimes in our business requirement we might have a requirement when a user may need more than one
profiles so in such scenarios permissions it comes into picture.
Because as we know one user can be matched to only one profile so in those scenarios where he needs
more permissions.
On top of the profile that he is already assigned to then we go for permission sets.
So let's consider it as simply a business use case.
To understand this concept better let's say for example in ABC company there are two teams the sales
team and the marketing team sales team has got access to the sales app and marketing team has got access
to the marketing app as simple as that but for some training purpose let's assume that only a couple
of a sales team members a say for example there are in total 10 sales team members out of that only
two team members sales team members need access to the marketing app maybe for some training or L.A.
or whatever so in this scenario what does other option only two of the 10 sales team members needs access
to the marketing at.
So what are the options that we have.
The options that we have in front of us is either modify the profile of the sales team members in such
a way that they have access to the marketing app right.
Say for example the sales team members they are assigned to the profile sales profile I'm currently
the sales profile does not have access to them marketing app so if we modify the sales profile and give
access to the marketing app yes our problem is resolved.
Meaning the tool sales team members really get access to the marketing app however that is a big blunder
in this very and not only the two team members but also the other eight sales team members will have
access to the marketing app.
We don't want that to happen because only two of the sales team members are going for the training not
the whole 10 people are going for the training
so only when we want to some set of permissions to be assigned to certain users then we go for permission
sets so this is how permissions that is actually used in real time on top of profiles when users need
some set of settings and permissions then we create a permissions set and assign it to those users venal
one user can have only one profile assigned to them however for permissions that they can have multiple
permissions it's assigned to them.
So one user can have one profile and multiple permissions it's assigned to them.
So permission said basically grants more access to users and it cannot restrict the access that is already
given to the user by profiles.
The whole concept of permissions set is only to grant more access and not restrict any access as such
so now that we have a good understanding about our permission set let's try to replicate the business
scenario here that is of we have to team members sales team members and the marketing team members the
sales team members with an all access to the marketing app then let's try to create a permission set
with access to the marketing app and let's try to assign that permission set to the sales team members.
But as you know we are in the developer edition then we can create only two users with the salesforce
license.
So let's consider those users and one off the use as the sales team member and first let's log into
the salesforce application as we can see here.
We have only to use us the second user also we created two understandable profiles and the second user
is assigned the profile that does the sales profile and the sales profile is a custom profile that we
created.
So now what.
Let's do this let's go to the sales profile and remove the axis for the marketing app.
So then we can replicate that scenario of our business cases the sales user does not have access to
the marketing app.
So for replicating the scenario let's go to the sales customer profile that we created and let me remove
the marketing app axis so if it is checked it means marketing app axis is prescient and let me uncheck
the check box so that the sales user does not have access to the marketing app so now that we have a
reward.
The axis for the marketing app.
If I log into the application you as a user do and then I will be able to see the marketing app let's
quickly check that out.
I have no logged in as a user do and we have revoked the access for this user to the marketing app.
So when you see the list of apps I do not have the marketing app.
So we have full effect replicated our scenario of our scenario as sales team members do not have access
to marketing app.
So this is the scenario.
User 2 is a sales user.
And he does not have access to that marketing app.
So now what we are going to do is we are going to create a permission set and assigned to this user.
And we are going to check if this user gets access to that marketing app.
So let's log in as a system admin and create a permissions set we are logged in a system admin go to
set up permissions sets manage users permission sets we can see there are some standard permissions
that's already available.
Now let's create custom permissions set.
So hit the new button fill in the details here Let's not assign any license as such we'll discuss more
about the submission said licenses later hit the save button
OK.
Perfect.
So now that our permissions that just created meaning the structure was created.
But as such we have not assigned any permissions to this permissions set.
So next what we're going to do is we are going to give the permission to access the marketing app for
this permission set.
And once done we assign the permissions at the user.
So how do we give that bond mission.
As you can see here every permission set it has got so many set of permissions starting from assigned
apps connected apps object settings permissions Apex glass special force and all these permissions are
available as part of permissions.
So as a senior admin it is not only sufficient for us to understand what permission said is how to create
them how to assign them.
But at the same time we should also understand what all the different type of permissions that I can
assign using a permissions that so we should have a good idea about what all the various options available
here and what all the various settings and permissions that are available under each one of these say
for example those assigned apps.
So what is assigned apps.
So I signed up as such and there are no assigned apps as such so hit the edit button.
So this will list down all the assigned apps.
I know that we have to choose the marketing app so the marketing app.
This is a standard app
so are there assigned apps.
We have now given the access for accessing the marketing app.
And as I mentioned as a senior admin we should know what all the various options available over here
say for example even the assigned apps.
So what we did basically we should they did buttons we were able to see you like what all the assigned
apps available and we were able to enable that app for this permission but if you can only notice this
option is available in profile but there is a difference in profiles we can assign what all the apps
that can be accessed by that profile.
At the same time we can also select one off the app as a default.
However that option is not available as permission set in permissions and you can only choose which
are on the app or apps.
VB possibly but you cannot choose a default app but that option is available in profiles.
So that does what I mentioned.
It is just not about creating a mission site and assigning it to users but as a senior admin we should
also understand what role the various permissions what all I can do using permissions set so meaning
like all these other options in case we have connected apps then we can use that object settings so
objects are things like we pretty much covered everything about the correct permissions for objects.
The fee level security that I call types all these similarly explored the other options the Apex glass
water all the various Apex glass water elevators we should full page access and water all the different
system permissions assistant permissions will cover a vast amount of permissions here.
Not everything by heart but at least we should have a good understanding of what all the various permissions
that we can control using permissions sets all right.
So now that what we have done we have created a commission SEC and we have given the access to the marketing
app using this commission set so access to marketing app as a name.
And in that in a signed app section we have given the access to the marketing app.
So now we have successfully created other permissions set.
But will it take effect.
Definitely not because it does not assign to any user.
So what we have to do we have to assign this permission cycle uses.
So assigning permissions at the users we can basically do it in two ways Either we can go to the permission
set we are right here and then the manager assignments.
And here you can select the user's to all those users who needs access to the permissions set.
But here we have only two users will be saying only two users.
But otherwise in real time like we'll have 50 hundred two hundred thousand users.
So in that case like we'll have all the users is out there so you can select all the users to whom you
have to assign this permissions at otherwise.
The other way of doing it is you can navigate to the user as such and in the user you will have a related
list that is permissions at assignments.
So there you can assign permissions sets and here you can assign like now we created our access to marketing
so you can create.
You can add the permissions set.
So either way you can do it you can assign if you want to assign multiple permissions sets to a user
the better way is to navigate to the user and then go to it going to those related list and then adding
all the permissions set.
But if you want to add one permissions set to multiple users then the best way to be to go to the permissions
set hit the manage assignments button thereby assigning the users.
But now we are assigning only one permissions at only one user.
So let's do it.
Either way it doesn't make any difference Sylvia here in the permission set like we do manage assignments
and assignments.
And let me select user to use it tool in our case is the sales user who doesn't who did not have access
to the marketing app but now that we have given this permission said it to this user this user should
be able to access the marketing app now for effect.
So now this user has got to access to the marketing app you can drill down to the user and you should
be able to see that permission sect under the related list permissions set assignments.
Perfect.
So now let's log in as user 2 and check it out so I have logged in as user 2.
And here.
Now we can see this marketing app.
Previously we are not able to see that.
So this is the whole concept of permissions set so permissions that comes into picture when we want
to extend the access that they have based on profiles if we want to give more access to use us then
we go for permission sets without changing the profiles because changing the profiles does not work
in all scenarios because changing the profile changes the formations that is assigned to all the users
who are assigned to that profile say for example some hundred users are assigned to a profile and if
you make any change to the profile all the hundred users will have they have in fact.
So in scenarios where we don't want that in scenarios where we want what is a fuel users to have some
set of permissions then we go forward.
But mission sets.
So this is the permission said that we created that is access to marketing.
App does the custom permissions set.
If you if you cannot recollect for profiles we can't create profiles directly we can only clone a standard
profile and create a custom profile.
But here that is not just an idea you can create a custom permissions set.
However you can also create custom permissions set by cloning the existing standard permissions that
you see here.
These are all the standard permissions sets of are already available but if you create a custom permit
if you create a custom permissions set by cloning a standard permission set like this nor that the permissions
at license can be modified the cloned permissions set also falls under the same permissions that license.
So this is just a step.
Yeah basically.
Good to know that why did we create a permission said because at many times when we have some different
features enabled and say this facade we use a different permissions and licenses and that time like
this will become handy.
So this is all about function sets.