Salesforce Permission Sets
What Is Permission Sets?
A permission set is a collection of settings and permissions that grants a user additional access, layered on top of whatever their profile already provides. Unlike profiles, a single user can have many permission sets assigned at once.
Why It Matters
Profiles define a user's baseline access and every user needs exactly one. Permission sets solve a different problem: granting extra access to specific users without creating a new profile for every variation. A support rep who occasionally needs access to a billing object doesn't need a whole new profile -- just one permission set added to their existing one.
How to Set It Up
Go to Setup and search for "Permission Sets" in the Quick Find box.
Click New, give it a descriptive label (e.g. "Billing Object Access"), and save.
Open the new permission set and configure Object Settings, Field Permissions, and any Apex class or Visualforce page access it should grant.
Click Manage Assignments, then Add Assignment, and select the users who need this access.
Test with a user in that assignment to confirm the access actually applies as expected.
Common Mistakes to Avoid
The most common mistake is recreating the same access pattern across multiple permission sets instead of using permission set groups to bundle related sets together, which becomes hard to maintain as the org grows. The second is granting object-level access without checking field-level security is also configured -- a user can have edit access to a record but still be blocked from specific fields if field-level security isn't aligned.
Next Step
👉 Read: Salesforce Certification Guide