The User Permission Assignment report can rapidly edit profile, permission set, and permission set group assignments by user. Similar profiles can be merged and Permission set groups can be automatically created. Export all of this information for compliance, governance, and security. This interface is available by right clicking an item on the desktop and also from the Options Menu.
Video
Metazoa Snapshot User Permission Assignments is a feature that lets you manage users, profiles, permission set groups, and permission sets, along with their interconnections within Salesforce.
User Permissions Assignment Report & Editing Interface
Accessing the Interface
-
Select a group of users you wish to manage. These users will then appear in the list on the left side of your screen.
-
Click on a user to view their linked profiles, permission set groups, and permission sets.
Editing Permissions
-
You can reassign a user's profile, permission set groups, and permission sets. The system will display a confirmation message about the changes that will be made.
-
Click 'OK' to confirm the changes. These changes will immediately apply to the Salesforce organization.
Focusing on Profiles
-
Instead of users, you can also focus on profiles. Select a profile to view users that can be reassigned to that profile.
-
Right-click on the selected profile in the focus list to edit, delete, or duplicate it.
-
If you choose to edit, you can change the profile name and permissions swiftly.
Focusing on Permission Set Groups
-
Select a permission set group to view the permission sets assigned to that group and the users assigned to that group.
-
You can also edit the name, label, and description of the permission set group.
Focusing on Permission Sets
-
Click on a permission set to view which permission set groups it belongs to and which users it has been assigned to.
-
Changes can be made as needed and saved accordingly.
Creating Permission Set Groups and Merging Profiles
Creating a Group
-
Select similar permission sets to group together.
-
Click 'Calculate Assignments' to view the users assigned to these permission sets.
-
Name the new permission set group and click 'Create Group' to bundle the selected permission sets into a new group.
-
This action will also assign the new group to the relevant users and remove the old assignments.
Merging Profiles
-
Select similar profiles and click 'Calculate Replacements'.
-
The system will calculate the minimum permissions required to merge these profiles and create new permission set groups for any differences.
-
Name the new profiles and merge the selected profiles accordingly.
-
All user permissions remain unchanged, and permission sets and profiles are reassigned properly after the profile merge.
Reporting
-
Navigate to the 'Select Report' tab to access various reports, including users and profiles, users and permission sets, users and permission set groups, permission set groups and users, and other combinations.
-
A 'Rollup Report' is available, which provides a comprehensive view of all permission assignments, including profiles, permission set names, and set groups assigned to the selected group of users.
-
Select the reports you wish to view, and they will be displayed in the 'Display Report' tab.
Note
As changes are made in a live Salesforce org, it is recommended to perform these actions on a sandbox and use deployment tools to move these changes into production.
The User Permission Assignments tool is designed for quick and efficient management and architecture of permissions, profiles, and users within Salesforce. It also allows for a powerful way to automatically create permission set groups and merge similar profiles for optimal system performance.
Links
Snapshot Best Practices: Salesforce Compliance, Governance, and Security