To support the Salesforce move from profiles to the more secure permission sets, Sage People has developed a dedicated tool to help convert your existing profiles to permission sets. The Sage People Profile to Permission Set Migration tool compares a selected customer profile to a supplied group of managed permission sets defined for a user persona. Identified differences are built into customized permission sets to supply permissions missing from the managed sets.
Customized permission sets can be added to a permission set group for an appropriate persona.
The tool is delivered as a separate package, Sage People Profile Migration Tool. You need to have the package in your org before you can run the tool.
When you have selected a profile, the Profile to Permission Sets Migration tool:
-
Compares the selected profile with a supplied group of managed permission sets.
The permission set group includes access permissions required for each Sage People package by the defined persona:
-
Produces a list of permissions granted by the profile but not included in any of the permission sets in the group.
The list is made available as a csv file for you to analyze the extra permissions in the profile.
You are likely to see some extra permissions in the profile. For example, if you have added custom fields to your org, then it is likely the analysis reports extra field access.
-
Creates a permission set to hold the extra permissions granted by the profile, and adds those permissions to the new permission set.
The permission set name follows the convention SpPST PS <profile name>.
-
Adds the new permission set to the permission set group holding the managed permission sets.
The permission set group name follows the convention SpPST PSG <profile name>.
-
Optionally assigns the complete permission set group to the users assigned to the original profile.
-
Replaces the original profile with a standard profile, such as Standard Platform User or Standard User.
The standard profile contains a minimal set of permissions.
The following diagram outlines these steps:
The Profiles to Permission Sets Migration app includes three batch processes which run in sequence to perform the migration:
-
BatchCreateDeltaPermissions
-
BatchMigrationProcess
-
BatchAssignPermissions