Compare Profiles and Permission Sets

-

Hi,

Currently there is no easy way to compare all permissions of Salesforce Profiles and Permission Sets.

There is no option provided by Salesforce to compare all of the permissions. 

Typically you would want to compare Profiles and Permission Sets for following 20 permissions.

  • Application Visibilities
  • Category Group Visibilities
  • Class Accesses
  • Custom Metadata Accesses
  • Custom Permissions
  • Custom Setting Accesses
  • External Data Source Accesses
  • Field Permissions
  • Flow Accesses
  • Layout Assignments
  • Login Flows
  • Login Hours
  • Login IP Ranges
  • Object Permissions
  • Page Accesses
  • Profile Action Overrides
  • Record Type Visibilities
  • Tab Visibilities
  • User Licenses
  • User Permissions

Solution

Here are 9 easy steps how you can compare Profiles and Permission Sets with all of its permissions (e.g. App Visibility / Record Type Visibility / Tab Visibility / User Permission / Object Permission / Field Permission) for selected Profiles and Permission Sets. This is the best Salesforce Profile Comparison Tool ever used.

1. Login to https://www.packmagix.com using your Salesforce credentials.

2. Click on 'Profile Comparator' menu item in the Home tab.

3. Select and 'Add to Package' the multiple Profiles or Permission Sets you want to compare permissions of. 


4. Click on 'Compare Perms' button. Wait for a minute or 2 for results to appear depending on size of your Org.

5. Comparison for all permissions (App Visibility / Record Type Visibility / Tab Visibility / User Permission / Object Permission / Field Permission) will be displayed on the screen for selected Personas.

6. Select 'Show Only Differences' to see only rows with different permissions. Alternatively, you can also select 'Show Only Matches' option to display only common permissions.             

8. You can also filter the results on all rows using Quick Find box.

9. Click on 'Download as CSV' button in each section to download the user permissions in a CSV file for documentation purpose.

This tool does not compare profiles between orgs. Please leave a comment if you would like that feature to be implemented.

Other Alternatives

Bulk Object Fields Creator 
https://bofc.io/compare-multiple-operations/how-to-compare-multiple-profiles-of-salesforce-in-few-clicks

Heroku Perm Comparator (CloudToolkit) 
https://perm-comparator.herokuapp.com

The Permissioner (AppeExchange Package)
https://appexchange.salesforce.com/listingDetail?listingId=a0N30000008XYMlEAO&tab=e

User Access and Permissions Assistant (AppeExchange Package)
https://appexchange.salesforce.com/listingDetail?listingId=a0N3A00000FeF99UAF&tab=e

Crazy Compare for Salesforce (Chrome Extension)
https://chrome.google.com/webstore/detail/crazy-compare-for-salesfo/bncmdklijpjfpmpdmobeafcegnnkkjff

References

Compare Profile Side by Side (Idea)
https://ideas.salesforce.com/s/idea/a0B8W00000GdeELUAZ/compare-profile-side-by-side

Comments

Post a Comment

Popular posts from this blog

Salesforce API Versions Retirement

-
Image
Hi, As of the Summer '22 release, the following Salesforce Platform API legacy versions have been deprecated and are no longer supported by Salesforce. You can continue to access these legacy API versions until Summer '23 is released, which is when these legacy versions will become retired and unavailable.  What is changing? SOAP: 21.0, 22.0, 23.0, 24.0, 25.0, 26.0, 27.0, 28.0, 29.0, 30.0 REST: v21.0, v22.0, v23.0, v24.0, v25.0, v26.0, v27.0, v28.0, v29.0, v30.0 Bulk: 21.0, 22.0, 23.0, 24.0, 25.0, 26.0, 27.0, 28.0, 29.0, 30.0 When versions 21.0 through 30.0 are retired , applications consuming these versions of the API will experience disruption as calls will fail and result in an error indicating that the requested endpoint is not found and unable to be processed by the platform.  Solution Event Log Files in Salesforce enables monitor all types of events that occur in Salesforce. e.g. Login, Logout, API calls made to Salesforce etc. If your Org is enabled for Event Monitori...
Read more

Profile to Permission Set Converter

-
Image
  Hi, Did you ever wanted to convert a Profile to a Permission Set in your Salesforce Org? If yes, this article is for you. There is already an AppExchange package 'User Access and Permissions Assistant'  by Salesforce which allows you do to convert a Profile to a Permission Set. However, at the time of writing this blog it does not support conversion of Salesforce Platform licence profiles. The managed package supports only User Permissions,  Object and Field Permissions. Please find below solution to convert all types of profiles with all types of permissions to a permission set. PackMagix copies Application Access, Apex Class Access, Custom Permission Access, Field Permissions, Flow Permissions, Object Permissions, Record Type Access, and Tab Access permissions to the new Permission Set. Once new permission Set is created you can edit it to remove unwanted permissions. This will help you to convert any Profile to Permission Set as Salesforce has declared end of life of...
Read more