Sage People uses Salesforce Profiles and Permission Sets to manage user access to different features of the system.
User permissions and access settings specify what users can do within an organization. For example:
- Permissions control a user's ability to edit an object record, view the Setup menu, empty the organizational recycle bin, or reset a user's password.
- Access settings control access to Apex classes, app visibility, and the hours when users can log in.
Permissions and access settings are specified in user Profiles and Permission Sets. Every user is assigned only one Profile, but can also have multiple Permission Sets.
When determining access for your users:
- Use Profiles to assign the minimum permissions and access settings for specific groups of users. Permissions and access settings defined in Profiles can be edited after installation in an org.
- Use Permission Sets to grant additional permissions, or to restrict permissions. Permissions and access settings defined in Permission Sets cannot be edited after installation in an org, contributing to the overall security of a configuration.
- Use sharing settings to further enhance system security if you need to do so.
Because you can assign many Permission Sets to users and Permission Sets are reusable, you can distribute access among logical groupings of users, regardless of their primary job function or their Profiles. For example, you could:
- Create a Permission Set that gives read access to a custom object and assign it to a large group of users.
- Create another Permission Set that gives edit access to the object and assign it to a small subset of those users.
Sage People is supplied with a range of Profiles and Permission Sets. You can use these as supplied, but not modify them. Alternatively, you can clone the Sage People supplied Profiles or Permission Sets and modify the clones to enable you to tailor permissions and access settings to more closely match the requirements of your organization.
More information
For more information about Profiles and Permission sets, refer to the Salesforce help center: