Hello Team
I am in the midst of this sort of pivot from profiles to a "minimal" profile + n modular permissionsets setup.
Conceptually I like the idea - all good with that. I know the official guidance tends to suggest people down this path, and there are a few articles and things around giving pointers.
I know we have recently that User Management feature that lets us replace the profile selection with the permissionsets selection when creating a new field. That is a good help.
But in my journey towards this overarching goal, I have found a few other places where the platform will still automatically surface the profile UI instead of permission sets, which makes it very difficult to keep aligned with the overarching goal. The two main examples I have found are these, but there are other places where the platform will automatically set object-level perms on profiles that I have seen too.
- Installed Manage packages - https://ideas.salesforce.com/s/idea/a0BHp000016L5E9MAK/install-managed-package-for-permission-sets-not-profiles
- Enabling FieldService setting in the org - will automatically grant a random set of workorder-related object-level perms on profiles
Are these planned to be resolved at some point? I find it strange I find little reference to these things online. Is the reality that most customers are not trying to do this?
Yeah, you’re running into some of the legacy gaps where profiles are still baked into certain setup flows. Salesforce’s long-term direction is definitely “minimum profiles + perms sets,” but not every feature or managed package install respects that yet. Best thing is to upvote and follow those IdeaExchange posts, and log cases so Product hears it’s blocking you — that’s usually what drives those changes.
