Salesforce is phasing out permissions on profiles in favor of permission sets and permission set groups for a more flexible and manageable user access model. This shift aims to simplify user management, improve data security, and streamline access control. By 2026, profiles will be limited to basic settings like login hours, while permissions will be managed primarily through permission sets.
Here’s a more detailed look at the changes:
- Profiles will be limited: In the future, profiles will primarily handle basic user settings like login hours and other general configurations.
- Permissions will be managed via permission sets: Object and field permissions, as well as custom permissions, will be managed through permission sets.
- Permission set groups: Permission sets can be grouped together to create more complex permission structures, offering greater flexibility in managing user access.
- Field-level security: Permission sets can now be used to control field-level security, reducing the need to manage permissions on profiles.
- Migration tools: Salesforce provides tools to help organizations migrate from profile-based to permission-set-based user management.
- Data security and integrity: The shift to permission sets is also intended to enhance data security and maintain the integrity of the Salesforce system.













