User Access & Permissions Assistant

Hi,

We have merged 2 organisations and now we see a lot of requests to change the UserPrincipalName in Azure AD. UserPrincipalName is mapped to FederationIdentifier in Salesforce. 

Here is what I think will happen: 

1. UserPrincipalName is changed in Azure AD 

2. Azure AD cannot find the User anymore in Salesforce as it do the lookup with a new UserPrincipalName 

3. Azure AD creates a new User in Salesforce 

4 I will how have 2 Users in Salesforce 

OR will Azure AD be able to find the Salesforce User in another way? 

Best Regards, 

Allan Pheiffer

Any thoughts, suggestions, on best practices around converting the System Admin Profile to Permission Sets? I just finished converting all of the regular users, 2 base profiles and a handful of Permission Sets and PSG's based on Persona's.  So all I have left if the System Admin and a QA role. So just trying to determine the "best" way to handle the System Admin. Multiple Permission Set's or just one overall? And what about all of the system permissions an Admin has? Do I really need all of those permissions? 

Any thoughts, tips, suggestions would be appreciated. 

I have a new client with a crazy mess of permission sets and profiles.  It looks like some other consultant converted all their previous profiles straight into permission sets and we now have about 150 permission sets named after various roles in the company, with no documentation of course.  Any suggestions on how to start sorting this out? 

1. Sys Admins - do people generally have a single permission set for Admins that has R/W access to all fields/objects rather than relying on the profile?  Now that the field creation flow shows permission sets, we have lots of fields that are not available to system admins as it was not added to the admin profile.
2. Role based vs functionality or object based - any thoughts on having perm sets around each object (view only vs standard user edit vs special edit scenarios) or by functionality (quotes and opps together for a 'Quoting' permission, other objects grouped for 'Account Mgmt' and 'Customer Service' etc)?
3. Any recommended tools you have used to document or discover what is in each of the existing permission sets to evaluate if we keep them, or perhaps we just start fresh and eventually retire all the existing perm sets?

Thanks for any advice or experience you can share 

When will this app support converting Salesforce Platform Licenced Profiles? 

I have a number of profiles that were shipped as part of a managed package that are linked to Platform Licences and would really like to use this tool to convert them to Permission Sets as well. 

Have converted my Salesforce License based Profiles already and they work perfectly. 

or can anyone recommend any other apps to try?

Hello!

I have got a muted permission set available in org which got removed from a permission set group after this permission set group deployment.

I found the Id of the muted permission set and I can open its page only in Salesforce Classic. 

I cannot any field connection between muted permission set and permission set group to connect them again. There is also no possibility to connect them starting from a permission set group page. There is only a button "New" for creating a new muted PS, no way to view free ones and re-connect.

 Can somebody advise, please ;)

Hi everyone,

I'm trying to add the permission Manage Multi-Factor Authentication in API to my user, but when I try to add the permission to an system admin, the system shows this message

The user license doesn't allow the permission: FreezeUsers

Do you know what's the issue?

Hi When saving the Named Credentials record I get error=redirect_uri_mismatch&error_description=redirect_uri%20must%20match%20configuration

 The URL is set as described in "The domain from the callback URL that shows in the authentication provider. For example, if the callback URL is https://www.example.com/services/authcallback/PermhelperAuth, then the domain is https://www.example.com."

We are trying to create some permission sets/permission set groups and we would like to be able to enable/disable Chat User and Service Cloud User from a permission set. It isn't under system permissions, is it somewhere else or it is not possible to do it via a permission set?

#Permissionset #Einstein Bots #User Management #Service Cloud