Permission Set Groups: Group Permission Sets Based on User Tasks for Easier Assignment (Pilot)

Instead of assigning users multiple permission sets, you can combine them into a single permission set group based on the tasks that a user regularly performs. You can include the permission sets in other permission set groups, too. Updates in a permission set propagate to all permission set groups that include the permission set, giving users in the groups the aggregated permissions. ISV partners can package permission sets in groups and allow subscribers to extend the groups with their own local permission sets.

Where: This applies to Lightning Experience in Enterprise, Performance, Unlimited, and Developer editions.

Note

Note

We provide this feature to selected customers through a pilot program that requires agreement to specific terms and conditions. To be nominated to participate in the program, contact your Success Manager or log a case in https://help.salesforce.com/home. Because pilot programs are subject to change, we can’t guarantee acceptance. This pilot feature isn’t generally available, as referenced in this document or in press releases or public statements. We can’t guarantee general availability within any particular time frame or at all. Make your purchase decisions only on the basis of generally available features.

Why: Suppose that you have employees in your sales department that work with Sales Cloud Analytics templates and apps. They must also create, edit, and delete surveys and read, create, edit, and delete accounts. You have three permission sets that contain the permissions needed: Sales Cloud Einstein, Survey Creator, and a permission set based on the Standard User Profile. You assign each permission set separately to your users.
A diagram where  several permission sets are assigned to a user.
But with a permission set group, you can combine the permission sets and assign the group to the sales employees. The new Sales Staff Users permission set group contains the combined permissions of all permission sets that you include.
A diagram where one permission set group is assigned to a user.
Note

Note

If you’re an ISV partner, to fully benefit from the pilot, enlist subscriber customers to participate. Using permission set groups along with a subscriber org allows you to move through a full cycle on a branched version of a managed package. If you participate in the pilot without a subscriber org, the feature is limited to Developer edition orgs and your test environment.