salesforce_security_impl_guide

Securing and Sharing Data
Enable Custom Permissions in Permission Sets
– If users have --Master-- on their profile and multiple custom record types in their permission sets, when they create a
record, they’re prompted to choose a record type. In their personal settings, users don’t have the option to automatically use
their default record type.
– If users have a custom record type on their profile and any custom record types in their permission sets, when they create a
record, they’re prompted to choose a record type. In their personal settings, users can set an option to automatically use their
default record type and not be prompted to choose a record type.
• Page layout assignments are specified in profiles only—they’re not available in permission sets. When you assign a custom record
type in a permission set, users with that permission set get the page layout assignment that’s specified for that record type in their
profile. (In profiles, page layout assignments are specified for every record type, even when record types aren’t assigned.)
• For lead conversion, the default record type specified in a user’s profile is used for the converted records.
• Users can view records assigned to any record type. As a result, a page layout is assigned to every record type on a user's profile. A
record type assignment on a user’s profile or permission set does not determine whether a user can view a record with that record
type; rather, the record type assignment simply specifies that the user can use that record type when creating or editing a record.
• Record types in permission sets aren’t supported in packages and change sets. As a result, any record type assignments in permission
sets in a sandbox organization must be manually reproduced in a production organization.
Enable Custom Permissions in Permission Sets
Custom permissions give you a way to provide access to custom processes or apps. After you’ve
created a custom permission and associated it with a process or app, you can enable the permission
in permission sets.
1. From Setup, click Manage Users > Permission Sets.
2. Select a permission set, or create one.
3. On the permission set overview page, click Custom Permissions.
4. Click Edit.
5. To enable custom permissions, select them from the Available Custom Permissions list and
then click Add. To remove custom permissions from the permission set, select them from the
Enabled Custom Permissions list and then click Remove.
6. Click Save.
Manage Permission Set Assignments
You can assign permission sets to a single user from the user detail page or assign multiple users
to a permission set from any permission set page.
• Assign Permission Sets to a Single User
• Assign a Permission Set to Multiple Users
• Remove User Assignments from a Permission Set
EDITIONS
Available in:
• Enterprise
• Performance
• Unlimited
• Developer
USER PERMISSIONS
To enable custom
permissions in permission
sets:
• “Manage Profiles and
Permission Sets”
EDITIONS
Available in:
• Enterprise
• Performance
• Unlimited
• Developer
• Database.com
31