Permission Sets

AD

Administrators can provide application-level access to features using permission sets. Some feature access is controlled through a user's profile or at the instance-level (General Settings). Permission sets give Administrators more granular application-level control. Permissions can be granted to user groups or individual users.

Example

The Profile Notes feature enables you to view, create, and delete notes on records. Using permission sets, you can give users access to view and create notes, but restrict their access by preventing them from deleting notes.

Permission sets are supported for the following features:

Predefined permission sets

Define a permission set

Create a permission set to give users application-level access to features; for example, the DCR Cleanup feature. Users who are not defined in this permission set will not see the DCR Cleanup feature in the Inbox.

To create the permission:

  1. In the Admin console, click Users & Permissions > Permission Sets.

  2. Click Add Permission Set.

  3. Type a Name and Description.

  4. The Status is Enabled by default. When the permission set is saved, the defined users will have immediate access to the DCR Cleanup feature.

  5. In the Permissions section, choose the operations the users can access.

    DCR Cleanup

    An inbox feature that enables users to bulk process tasks.

    • Reject tasks - Bulk reject tasks.

    • Cancel tasks - Bulk cancel tasks.

    • Approve tasks - Bulk approve tasks.

    Users that have access to these operations can select the tasks from the Inbox or upload a file containing task IDs. These permissions also give users access to the DCR Cleanup page (View Previous Operations option) to monitor their task cleanup operations.

    If a user does not have access to one of the actions, it does not display in the feature.

    Example

    If you give users access to Reject tasks, but not Cancel tasks or Approve tasks, they will only see the option to reject tasks in the DCR Cleanup list.

    Field Helper

    Allow users access to view and manage field help.

    • View Field Helper on Profile - Users will have access to view the Help panel and information for fields on the Profile page.

    • Manage Field Helper - Users can add and manage field help.

  6. In the Notes section, you can define the permissions for these users to access notes on the Profile page and on DCRs.

    Note: There is a predefined permission set for Notes. If a user is in this permission set and the Notes Permission Set, they will have the highest level of access defined from either group.

  7. In the Admin Functionalities section, you can define the permissions for these users to access features in the Admin console.

    These permissions apply to Data Managers, System Admins, and System and Data Admin users only.

    Note: There is a predefined permission set for admin feature access. If a user is in this permission set and the Admin Permission Set, they will have the highest level of access defined from either group.

  8. In the User Groups section, click Add User Groups.

    Select the groups that should have access to the feature and permissions that you have defined.

    Click Add User Group.

  9. In the Users section, add individual users to the permission set. Click Add Users and select the specific users.

  10. Save your changes.

    Users assigned to this permission set will now have access to the DCR Cleanup feature.

Audit

Administrators can track the changes to permission sets in the System Audit Log.

Tip: To filter the logs, use the Permission object type.

The following activities are tracked:

  • Enabling and disabling a permission set.

  • Changing a permission set: permissions, user groups, and users.