What Should be on Profile Vs. Permission Set in Salesforce?

#1MinuteTip Salesforce announced end of life (EOL) of permissions on Profiles from Spring ’26 release. Permission sets are the future of user management in Salesforce.

For any new implementation (or enhancement to existing implementations) of Salesforce, you should consider using permission set to grant permission to users rather than granting it on profiles. Profiles should now be kept for just the bare minimum access and to grant permissions that you can’t do through permission set.

Here is the screenshot of what you should be keeping on profile and what should be granted through permission set and how you should structure your permission sets & groups. These two slides were taken from the session Architect’s Review of the Principle of Least Privilege at #TDX23 (link below).

What Should be on Profile Vs. Permission Set in Salesforce?
How to structure permission set and permission set groups in Salesforce

References & Useful URLs

Leave a Comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Scroll to Top
Introducing All Access Pass