We're in the process of moving our users over to get their permissions from permission sets/permission set groups instead of profiles (except for things like record type assignments, etc.).
I've been thinking ahead and wondering what are the best practices for moving System Administrator users. I am one obviously and my profile is the standard Salesforce-created "System Administrator" profile, which has tons of permissions for everything. I could try and replicate those permissions on permission set groups, but I'm a little concerned if I miss anything and then switch myself over, I'll lose permissions I need to administrate the system (and somehow get locked out and need support help to regain access).
There is another System Admin in our org, so I could use her as the test case and wait to move mine over for a while, but I was wondering if Salesforce (or anyone else) has published suggested steps for transitioning System Admins (or even if we should avoid moving System Administrators for the time being). Will Salesforce be creating a standard permission set group for System Administrators like they did with the standard System Administrator profile?
Interesting question. I present about this subject a lot and still include having the standard System Administrator profile in use for (and only for) those that are in that position.
My assumption is that when Salesforce actually subsets permissions on profiles they'll release an equivalent to the System Admin profile as a PSG.
They'll kind of need to as they need to give the first user something when they spin up a new org for a customer.
My advice would be to wait and see before going to the effort of migrating the true admin(s) in your org.
