Hi Trailblazers!! I hope you're doing well?

I am confused with one situation. Since profiles and permission sets are closely related to each other, seeking your views on this scenario:

We had set up Roles, Profiles and Permission Sets long back while setting up the org and now planning for a clean-up activity. We have multiple roles such as Sales People, Service People, Branch Managers, Cluster/Regional Managers, Operation Managers and Management. We are using profile ids in validation rules to restrict access to a particular profile after the opportunity is won.

Since it is a clean-up activity what should be my approach for Profiles and Permission Set?

Should I create all 6 different profiles or go with 3 profiles and then grant access via permission set?

What are the best practices for Profiles and Permission Sets?

Thank You,

Gaurav Khetia