Hello - I am a solo admin for a nonprofit and I am starting the journey of migrating from Profiles to Permission Sets. I have been doing some research and talking with others, watching presentations, and more. So at a high level, things are making sense. However......I am also trying to determine what are the main things that are important and what is just "noise".
For example, I am doing some comparisons of the profiles and I am also just reviewing what access each profile has, not what is just different but do I have profiles that have access to object and fields that they should not have (or do not use).
I am using the Elements app to help with this and one thing I noticed is that in some cases, even if a person has a Profile called "Coach" for example and that Profile does NOT have access to a specific Object, like "Opportunities" they are showing that they DO have access to a number of fields in the Opportunity Object.
Now, I know that since they don't have access at the Object level they can't view those fields. But my question is Do I need to make sure that I remove the field level access on the "Coach" profile and another other profiles that were cloned off that? Or just leave it as is and just focus more at the overall Object level?
Again, just trying to determine how much clean up (or pre work) I need to do.
I should mention that our org has been using SF since 2009 and I was not here, so I really don't know what they did to make a number of the profiles or specifically what base profile they cloned a lot of what I am dealing with now.
Anyway, any insight/advise is appreciated.
#Salesforce Admin #Permissionset #Profiles
Hi @Heath Parks
I have recently done this process myself.
I would recommend clearing out what they don't need access too, as going forward it will make things clearer and easier for you.
You do also have a couple tools you could use to make this process easier.
1st tool is PermComparator which is a Heroku app that lets you compare user's access.
2nd is an app I have installed in my org called 'User Access & Permissions Helper' from the AppExchange.
This wonderful app allows you to convert existing profiles into permissions sets at a click of a button.
Hope this helps :)
