The Profile and Permission Sets report documents all of your Profiles and Permission Sets, and their access to things throughout the org, like tab visibility, layout assignments, object permissions, etc.
This report is similar to our View Profiles and Permission Sets report, however, there are two main differences that make this report very useful. You can report on Permission Set Groups and you can report on the Combined Security.
The Combined Security report switched the context out of the specific profile, permission set, or permission set group, and combines all of them and shows their level of access per user. This is helpful as it will show you the ultimate level of access to a particular setting based on that users profile, permission set, and permission set group assignments.
The top line will always be the profile, the middle line(s) will always be permission sets/groups, and the bottom like will be the combined security of them all.
If the results are in black, that means that the profile is the only thing controlling access to that setting. If the results are in red, that means the the permission is is not granting any additional levels of access than the profile. For example, the profile is granting full access, but the permission set is only granting create, edit, and read. We call this out because it means there is room for optimization. At least in the context of this specific setting, the permission set is unnecessary. If the result is green, that means a permission set or group is elevating access on top of what the profile is providing. For example, if the profile is only granting create, read, edit, delete access, but the permission set is granting full access, the combined security is full access. This is labeled differently, so you can see where there could be room for improvement on the profile/permission sets assigned to particular users.
On the Display Report tab you will see all of the settings you chose from the first tab, but you also have options like Select Users, Trim Table, and Field Details. Select Users allows you to choose which users you'd like to pull into the combined security report. Trim Table allows you to choose if you'd like to see all profiles/permission sets/groups, or only certain ones. You can also trim your security settings, like all object permissions, or only certain objects. Field details allow you to add details about fields in the field permission reports. These details include:
- Business Status
- Security Classification
- Compliance Group
- Field Type
Video
Metazoa Snapshot's Profiles and Permission Sets feature is a robust reporting tool designed to provide a comprehensive view of the current permissions within your Salesforce account. This feature not only displays all your profiles and permission sets, but also allows users to analyze combined security reports, user preferences, and schedule report dispatch.
Feature Breakdown
Profiles and Permission Sets Report
This report presents an extensive overview of your profiles and permission sets across various categories such as:
- Apex Class Accesses and Page Accesses
- Application Visibility
- Field Permissions
- Layout Assignments
- Object Permissions
- Record Type Visibility
- Tab Visibility
- User Permissions and Custom Permissions
The Profiles and Permission Sets Report is crucial for summarizing and understanding the current permissions in your Salesforce account.
Combined Security Reports
Combined Security Reports delve deeper into user-specific permissions. This feature allows you to select a set of users, then view all their profiles and how permission sets alter their ultimate permissions.
For example, you may examine a user whose profile grants them no access to a specific object. However, after applying several permission sets, they might gain full access to the same object.
The Combined Security Report also includes Application Visibility. You can observe how a user's profile initially hides an application, but becomes visible when a permission set is applied.
This feature provides insight into the actual security each user has, making it an indispensable tool for managing and troubleshooting permissions.
User Preferences Report
This report exhibits all the preferences that your users have configured. By right-clicking the report, you can see the percentage of users who have enabled a particular preference.
Displaying and Exporting Reports
After selecting the reports you wish to view, you can click on the 'Display Report' tab to view all selected reports in a stacked manner.
You can then export these reports as a PDF or HTML. This flexibility supports easy sharing and analysis of the report data outside of the Metazoa Snapshot application.
Scheduling Reports
This feature facilitates the scheduling of reports and sending them out in an email to a chosen group or saving them in a folder. It provides valuable aid in maintaining compliance and security, especially for businesses that require regular report updates.
Selecting Users
You can easily select users by right-clicking and choosing users by their name, role, profile, or permission set. After selection, the Combined Security Report for all selected users is automatically generated.
Conclusion
Metazoa Snapshot's Profiles and Permission Sets report provides a comprehensive view of your Salesforce permissions. By providing detailed reports on profiles, permission sets, user preferences, and combined security, it ensures you maintain visibility and control over your Salesforce environment's security. This feature is integral for ensuring compliance, managing permissions effectively, and enhancing security within your Salesforce account.
Links
Snapshot Best Practices: Profile and Permission Set Management
Snapshot Best Practices: Salesforce Compliance, Governance, and Security