You are here:

Permission Sets

Permission sets are a Salesforce platform feature enabling you to manage user access. Permission sets are provided with the PSA managed package. Use permission sets with user profiles to manage your users' privileges. You can assign permission sets to up to 1000 users at a time.

Starting with version 15, PSA includes predefined permission sets for all new functionality to easily provide users access to new features. Managed packages still include custom user profiles provided with earlier versions of PSA, but are no longer updated to include new functionality.

Identifying PSA Permission Sets

PSA Permission sets are provided in three levels:

Application
Process
Action

Permission sets to create an Expense, for example, are available at the following levels: PSA - Expense - Save. Assigning permission sets at Level 1, Level 2 or Level 3 does depend on your business needs.

Assigning PSA Permission Sets

Here are some scenarios of how you can assign PSA permission sets.

Assign user permissions for the whole Expense to allow access to all processes in the applications and perform all actions. This is assigning permissions at the Application level (Level 1).
Assign Level 2 permissions to allow access to all Expense related actions, such as Save, Edit, Delete, Multiple Expenses Entry. This is assigning permissions at the Process level (Level 2).
Assign a separate permission set for different actions, such as Save, Edit, Delete or Multiple Expenses Entry (at Level 3).

Each permission set gives users the access required to work with that application, process, or action. A permission set also includes access to any classes and pages that are required to work with an application, process, or action.

For more information on the permission sets included in this release of PSA, see Permission Sets for this Release.

Further Illustration

Further examples are illustrated in this table:

Level 1	Level 2	Level 3
PSA	PSA - Expense
		PSA - Expense - Save
		PSA - Expense - Edit
		PSA - Expense - Delete
		PSA - Expense - Multiple Expenses Entry
	PSA - Assignment
		PSA - Assignment - Save
		PSA - Assignment - Edit
		PSA - Assignment - Delete
		PSA - Assignment - Close
		PSA - Assignment - Link To Methodology
		PSA - Assignment - Link To Milestone
		PSA - Assignment - Link To Phase
		PSA - Assignment - Edit Schedule
		PSA - Assignment - Zero Schedule

The onboarding process installs permission sets that control access to apps and standard Salesforce objects (such as Account and Opportunity) in a separate package.

Using PSA Permission Sets

You can use a combination of user profiles and permission sets to manage your users' privileges:

Use Profiles	Use Permission Sets
Manage user privileges for standard Salesforce objects and other applications (excluding PSA).	Assign to individual users.
Manage user privileges for other FinancialForce applications such as PSA.	Use for PSA.
Manage team-wide privileges.	Assign extra privileges to one or two individuals within the team.

You cannot edit predefined permission sets. However, you can clone them to create your own variations. If you create your own permission sets, use the three level structure. If you clone the predefined permission sets or create your own, you need to manually update them to add new functionality in future versions of PSA. The predefined permission sets are updated automatically.

Migrating to using PSA Permission Sets

If you are upgrading from an earlier version of PSA, here are some suggestions as to how you can migrate to using permission sets:

Continue to use your existing user profiles and assign permission sets to users for new functionality only.
Remove all PSA permissions from your existing user profiles, then assign permission sets to users for all the functionality they need.
When creating new users, use a profile to manage user privileges for standard Salesforce objects and assign the PSA permission sets to individual users.

You can create list views for groups of PSA permission sets to make them easier to assign to users. To assign permission sets to users, see the suggested Salesforce Help topics below.

Adding Custom Fields to PSA Permission Sets

If you add custom fields to any PSA objects, you must add them to the relevant permission sets.

For example, if you add a custom field to the Expenses object and you want users to be able to save expenses with this field populated, you must enable Read and Edit permissions for this field in the PSA – Expense – Save permission set and make the field available on the appropriate page layouts.

You can also enable access to the custom field in other permission sets, such as PSA – Expense Reports.

Salesforce Help Topics

The Salesforce help topics below provide further information about permission sets and assigning them to users:

"What are permission sets?"
"About Permission Sets and Profile Settings in Packages"
"Assign Permission Sets to a Single User"
"Assign a Permission Set to Multiple Users"

Related Concepts

Administrator Guide

Permissions

Permission Controls

Permission Sets for this Release

Open topic with navigation