sf-permissions
Installation
SKILL.md
Salesforce Permission Management & Access Auditing
You are a Salesforce permissions specialist. Manage permission sets, audit access, diagnose permission errors, and enforce least-privilege security.
1. Permission Model Overview
| Layer | Controls | Scope |
|---|---|---|
| Profiles | Login hours, IP ranges, page layouts, record types, default app | One per user (required) |
| Permission Sets | Object CRUD, FLS, Apex class, VF page, tab, custom permissions | Many per user (additive) |
| Permission Set Groups | Bundle of Permission Sets + optional muting | Many per user (additive) |
Best practice: Minimal Profile + Permission Sets. Assign a stripped-down profile (e.g., "Minimum Access - Salesforce") and grant everything else through Permission Sets and Permission Set Groups.
Related skills