+ Start a Discussion
Laura GilLaura Gil 

permission set group vs profile

Hi all,
Happy New Year!.
 
Here I am with a new question. A colleague of mine said best practice is to use Permission Set Groups and Permission Sets instead of Profiles. We are deploying through CI/CD (GIT) and he said there could be problems if using profiles.
 
I would appreciate if experts using Permission Set Groups could tell me from their experience. Is that so, it is better to use them instead of profiles?. In which cases it is better to use them?
Best Answer chosen by Laura Gil
AbhishekAbhishek (Salesforce Developers) 
Laura,

Permission Sets: In these Permission sets we define the access level of the user. Generally, we determine what a user can do in the applications. These are used to grant additional permission to a user.

Profiles: In Object level Security, Profiles are assigned to the user by the system administrator. A profile can be assigned to many users where a user can have only one Profile.

The key difference between the two is that the Profile is the user's base set of permissions and all users are assigned to one. ... Profiles can be used to give or take away permission from the users assigned to them. Permission Sets can only give or extend permission to the users assigned to them.

I think this a good example to understand better:

The profile is like a Key to House

Permission sets are like keys to individual Rooms.

So if this profile is assigned to the user means he can enter the house but can’t enter the rooms
Until and unless permission sets are assigned to the user he can't enter the rooms

For further information check the below discussion which has examples too,

https://salesforce.stackexchange.com/questions/119220/exclusive-differences-profiles-vs-permission-sets/119297#:~:text=The%20key%20difference%20between%20the,users%20are%20assigned%20to%20one.&text=Profiles%20can%20be%20used%20to%20give%20or%20take%20away%20permission,the%20users%20assigned%20to%20it.



Let me know if it helps you and close your query by marking it as solved so that it can help others in the future.

Thanks.

All Answers

AbhishekAbhishek (Salesforce Developers) 
Laura,

Permission Sets: In these Permission sets we define the access level of the user. Generally, we determine what a user can do in the applications. These are used to grant additional permission to a user.

Profiles: In Object level Security, Profiles are assigned to the user by the system administrator. A profile can be assigned to many users where a user can have only one Profile.

The key difference between the two is that the Profile is the user's base set of permissions and all users are assigned to one. ... Profiles can be used to give or take away permission from the users assigned to them. Permission Sets can only give or extend permission to the users assigned to them.

I think this a good example to understand better:

The profile is like a Key to House

Permission sets are like keys to individual Rooms.

So if this profile is assigned to the user means he can enter the house but can’t enter the rooms
Until and unless permission sets are assigned to the user he can't enter the rooms

For further information check the below discussion which has examples too,

https://salesforce.stackexchange.com/questions/119220/exclusive-differences-profiles-vs-permission-sets/119297#:~:text=The%20key%20difference%20between%20the,users%20are%20assigned%20to%20one.&text=Profiles%20can%20be%20used%20to%20give%20or%20take%20away%20permission,the%20users%20assigned%20to%20it.



Let me know if it helps you and close your query by marking it as solved so that it can help others in the future.

Thanks.
This was selected as the best answer
Laura GilLaura Gil
Abhishek, thank you so much for the given example which lets me understand better what both really do. I have read profiles will be deprecated in the  future.