Business Scenario related To Permission Set || By Rajesh Chatterjee || Delipat.

Understanding permission sets with real-world business example
In previous articles/videos, we discussed permission sets and the creation and assignment of permission sets. Now, let us understand permission sets better with a business scenario.
A company has five sales executives- User A, User B, User C, User D and User E. All the five users have the same profile- Sales executives. The sales executive profile grants permission to all five users to create and customize reports. As a result, all five users can create and customize reports in Salesforce.
But, the company wants to change the access. It does not want Users A, B and C to create and customize reports. The company wants only the users D and E to create and customize reports in their Salesforce org.
Now, as a system admin, how will you configure the settings in Salesforce?
Will you create permission sets to restrict the access for users A, B and C?
That is not possible, right?
Do you know why?
Because permission sets cannot restrict permissions. They can only give permissions.
So the System admin will give minimum access through profile and open up the accesses with permission set for specific user.
Points to remember about permission sets
Permission sets can grant additional or extra access to an individual user. They act as additives.
Permission sets cannot restrict access for any user. They can only be used to extend the functionality of users without changing profiles.
The settings and permissions available in permission sets are the same as those in profiles. But, they can be assigned to individual users.
One user can have multiple permission sets assigned to him.
A profile is mandatory for a user, not the permission set. Hence, a user may or may not have permission sets assigned to him.
Now, how will you configure the settings in Salesforce for the company discussed earlier?
In the above discussed business scenario, you should remove the access to create and customize reports for the Sales executive profile. Once you remove the access, no user with a sales executive profile will be able to create and customize reports.
After removing the access from the profile, you can create a permission set with the access to create and customize reports. That permission set can then be assigned to Users D and E to grant them access to create and customize reports.
In this manner, you can combine permission sets and profiles to grant the required level of access to the users.
For object and field-level security, profiles can be used to give baseline or minimum access to users and extend the access using permission sets. Similar to record level security, where organization-wide defaults are used to give baseline access, and sharing rules, manual sharing and role hierarchy are used to extend the record access.
I hope this business scenario helped you understand permission sets in a better manner. Let us test the permission sets we created in the next article/video.
𝐏𝐥𝐞𝐚𝐬𝐞 👍 𝐋𝐢𝐤𝐞, 𝐂𝐨𝐦𝐦𝐞𝐧𝐭 𝐚𝐧𝐝, 𝐒𝐡𝐚𝐫𝐞 𝐭𝐡𝐞 𝐕𝐢𝐝𝐞𝐨.
𝐒𝐮𝐛𝐬𝐜𝐫𝐢𝐛𝐞 𝐎𝐮𝐫 𝐂𝐡𝐚𝐧𝐧𝐞𝐥 𝐅𝐨𝐫 𝐌𝐨𝐫𝐞 𝐕𝐚𝐥𝐮𝐚𝐛𝐥𝐞 𝐕𝐢𝐝𝐨𝐞𝐬.

[@tejasai9390]

Superb Explanation, thanks for uploading the video @Delipat

[@Delipat-Rajesh]

𝐏𝐥𝐞𝐚𝐬𝐞 👍 𝐋𝐢𝐤𝐞, 𝐂𝐨𝐦𝐦𝐞𝐧𝐭 𝐚𝐧𝐝, 𝐒𝐡𝐚𝐫𝐞 𝐭𝐡𝐞 𝐕𝐢𝐝𝐞𝐨.
𝐒𝐮𝐛𝐬𝐜𝐫𝐢𝐛𝐞 𝐎𝐮𝐫 𝐂𝐡𝐚𝐧𝐧𝐞𝐥 𝐅𝐨𝐫 𝐌𝐨𝐫𝐞 𝐕𝐚𝐥𝐮𝐚𝐛𝐥𝐞 𝐕𝐢𝐝𝐨𝐞𝐬.

[@saurabhyedlawar2060]

brilliant brilliant brilliant brilliant brilliant brilliant brilliant .............................

[@rahulgoud2134]

This is an excellent video❤

[@Delipat-Rajesh]

𝐏𝐥𝐞𝐚𝐬𝐞 👍 𝐋𝐢𝐤𝐞, 𝐂𝐨𝐦𝐦𝐞𝐧𝐭 𝐚𝐧𝐝, 𝐒𝐡𝐚𝐫𝐞 𝐭𝐡𝐞 𝐕𝐢𝐝𝐞𝐨.
𝐒𝐮𝐛𝐬𝐜𝐫𝐢𝐛𝐞 𝐎𝐮𝐫 𝐂𝐡𝐚𝐧𝐧𝐞𝐥 𝐅𝐨𝐫 𝐌𝐨𝐫𝐞 𝐕𝐚𝐥𝐮𝐚𝐛𝐥𝐞 𝐕𝐢𝐝𝐨𝐞𝐬.

[@rahulgoud2134]

Please explain the sharing settings role hirearcy role based sharing sir

[@Delipat-Rajesh]

𝐏𝐥𝐞𝐚𝐬𝐞 👍 𝐋𝐢𝐤𝐞, 𝐂𝐨𝐦𝐦𝐞𝐧𝐭 𝐚𝐧𝐝, 𝐒𝐡𝐚𝐫𝐞 𝐭𝐡𝐞 𝐕𝐢𝐝𝐞𝐨.
𝐒𝐮𝐛𝐬𝐜𝐫𝐢𝐛𝐞 𝐎𝐮𝐫 𝐂𝐡𝐚𝐧𝐧𝐞𝐥 𝐅𝐨𝐫 𝐌𝐨𝐫𝐞 𝐕𝐚𝐥𝐮𝐚𝐛𝐥𝐞 𝐕𝐢𝐝𝐨𝐞𝐬.