What Are Permission Set Groups?

Introducing Permission Set Groups

Salesforce has released new cool feature Permission set group in Winter ’20 Release. Permission sets are the best way to manage your data security in your org. The Permission set group allows to combine multiple permission sets into a single permission set group for user assignment. Use a Permission set group to multiple permission sets together based on the job role. You can include a permission set in more than one permission set group. You can also remove individual permissions from a group with the muting feature.

Example

Let’s take an example here. Suppose that you have users in your Sales department with the below requirements.

1. Use Sales Cloud Analytics apps
2. Import leads and update campaign history and Import personal accounts and contacts.
3. Create list views; modify and delete own list views.

So, here you we have to create three permission sets and assign to users.

1. Sales cloud Einstein Permission Set
2. Import Leads and Personal Contacts
3. Manage List View

See below screenshots, I have created three different permission sets.

 

 

 

Without the permission set group, you have to assign each permission set separately to this set of users according below image.

So, here you can create a permission set group and assign one or multiple permission sets into this group and assign to the user. You can call it Miraforce Sales Staff. Then, assign the group to the sales employees. The permission set group contains the combined permissions of all three permission sets. See the image below.

 

 

Create and Assign a Permission Set Group

Follow the steps below, how to create a Permission set group and assign to the users.

Step 1 – Create a Permission Set Group

Go to the Setup | Enter Permission Set Groups in the Quick Find box| Click New Permission Set Group | Enter Label and Description (Optional) | Click Save. Follow the Screenshots below.

Step 2-  Add Permission Sets to a Permission Set Group

In the Permission Set Group detail page, under Permission Sets, click Permission Sets in Group | Click Add Permission Set | select the permission sets that you want to add to the group, and click Add | Click Done. The permission set Group is ready. Follow the Screenshots below.

 

 

 

 

 

 

 

 If you want to remove any permission set from this group, Choose and click Permission Set | Click Remove Permission Sets. Follow the screenshot below.

 

Step 3 – Assign Permission Set Groups to Users

Go to the Permission Set Group detail page, click Manage Assignments | Click Add Assignments | Select each user who you want to assign the group to, and then click Assign| Click Done. Follow the screenshots below.

 

 

When the update is complete, the permission set group status changes to Updated.

Muting Permission Set in Permission Set Group

Muting permission set with a permission set group to mute certain permissions. You can reuse the same permission set in several groups and adapt the permission to the different situation. Any mute permission is not included in the permission set group.

Example

Let’s take Mute permission example. Here, we have created permission set group called Miraforce Sales Staff. It contains three permission sets. One set contains a delete permission that you no longer want all group members to have. However, another permission set group also references this permission set.

Instead of creating another permission set, we create a muting permission set. The muting permission set contains the delete permission that you want to mute. When you add the muting permission set to the group, assigned group users no longer have the delete permission. However, users assigned to the permission set outside of the group still have the delete permission. In the below image you can see permission set 2 “Import Leads and Personal contacts”. Only I want to remove “Import Leads and Update Campaign History” permission. Here, I have created mute permission set, it’s called “Mute Delete Import Leads”

Add a Muting Permission Set to a Permission Set Group

Only one step to create a muting permission set. Follow the step below.

Note: You can add up to one muting permission set per permission set group.

Go to the Permission Set Group detail page| Under Permission Sets, click Muting Permission Set in Group |Click New | Enter Label | Click Save | Click on Mute Delete Import Leads. Follow the screenshots below. ­

 

Here, select which permissions to mute, in this case, I want to delete Import Leads permission. click App Permission | You can see here group details page, Click Edit | In the Muted Column, select permission that you want to mute, in this case I select Import leads and update campaign history | Click Save. Follow the screenshots below.

Summary

All done. The permission set group is ready. It’s very easy to create a permission set group. Try to create permissions set group in your org and assign to the users.

Note:

• You can add up to 100 permission sets to a permission set group.
• When viewing permission set groups in a list view, no actions are available in the list view dropdown menu.
• If you include session-based permission sets in a permission set group, the permissions in them do not require session-based activation for users assigned to the group.
• When a permission set is part of a group, you can still assign the individual permission set, apart from the permission set group, to specified users as needed.