Get Hands-On With Permission Set Expiration

Learning Objectives 

After completing this unit, you’ll be able to:

• Enable Permission Set or Permission Set Group Expirations.
• Assign Expiration Details for Users in Permission Sets or Permission Set Groups.

Enable Permission Set or Permission Set Group Expirations

Now you can assign an expiration date to each permission set or permission set group. Permission set and permission set group assignments use a new Lightning Experience interface and an improved workflow.

Users can be assigned to permission sets or permission set groups with or without an expiration date. When a permission set or permission set group has an expiration date, users can lose access to functionality after the expiration date. By default, permission set and permission set group assignments don’t expire.

Where: This change applies to Lightning Experience and Salesforce Classic in all editions.

Assign Expiration Details for Users in Permission Set or Permission Set Groups

Set assignment expiration dates and assign permissions that expire to users via permission sets and permission set groups. Assigned users receive access to all aggregate permissions until the expiration date.

To assign users to permission set groups, create the permission set group with the permission sets and permissions that you want to assign to users before you begin.

1. To activate this feature, enable Permission Set & Permission Set Group Assignments with Expiration Dates in User Management Settings.
2. Access the Permission Sets or Permission Set Groups Setup page.
   1. To edit a permission set, from Setup, in the Quick Find box, enter Permission Sets, and then select Permission Sets.
   2. To edit a permission set group, from Setup, in the Quick Find box, enter Permission Set Groups, and then select Permission Set Groups.

In the list view, click the name of the permission set or permission set group name that you want to update.

If a permission set or permission set group contains any of the following permissions, it can’t have an expiration date associated with it. Assign Permission Set, Manage Profiles, Manage Users Permission Sets

1. Click Manage Assignments.
2. On the Current Assignments page, click Add Assignment.
3. Optionally, select or create a list view to refine your user list.
4. Select the users that you want to assign, and click Next.
   Search for a name by typing it in the search bar.
5. Select an assignment expiration option for the users you selected.
   1. If you don’t want the assignments to expire, select No expiration date.
   2. To choose an expiration date and time zone, select Specify the expiration date.
      
6. Click a time frame, such as 30 days, or to enter a custom date, click Custom Date.
7. Select a time zone. Assignments expire at 11:59 PM on the date and in the time zone that you specify.

   If you select My Local Time Zone, expiration occurs at 11:59 PM in your time zone. For example, if you have a user with an assigned expiration who uses Japan Standard Time. You use Pacific Daylight Time as your time zone. If you select My Local Time Zone as the time zone expiration option, the user’s assignment expires at 11:59 PM Pacific Daylight Time.

8. Click Assign.

Example

Suppose you need consultants in the San Francisco office to evaluate language used in sales contracts. Assign the consultants to a permission set group that contains the permissions that they need. When you assign the consultants to the group, specify that the assignment expires in 30 days (GMT-07:00) Pacific Daylight Time (America/Los Angeles). If you assign the permissions on June 1, the assignments expire on June 30 at 11:59 PM Pacific Time.

When you have permission set groups with user assignments that expire, you can make updates to the permission sets in the group. If you update the permission sets by adding or removing permissions, the assigned users receive or lose permissions after the permission set group recalculation occurs. When the assignment expiration date is reached, assigned users lose access to the permissions in the group.

Get Ready for the Hands-on Challenge

In the hands-on challenge below, you have an opportunity to work with permission set expiration settings.

Launch the org you’ll use for the hands-on challenge. Next, enable Permission Set & Permission Set Group Assignments with Expiration Dates in User Management Settings.

Resources

• Salesforce Help: Set Assignment Expiration Details for Users in Permission Sets and Permission Set Groups
• Salesforce Help: Manage Assignment Expiration Details for Users in Permission Sets and Permission Set Groups
• Salesforce Help: Remove User Assignments in Permission Sets and Permission Set Groups
• Salesforce Help: Permission Assignment Expiration Considerations