Salesforce announcing the end of life (EOL) of permissions on profiles/ Retire Permissions on Profile that will be the Spring ’26 release
Profiles will still exist; however, permissions on profiles will EOL and permissions will be available only on permission sets.
Before we dive into what’s new with Spring ‘23, here’s a quick reminder of what will remain in a profile and what will eventually be available only in permission sets. I’ve also included some FAQs to help you understand where we’re going.
Profiles will still exist; however, permissions on profiles will EOL and permissions will be available only on permission se
Why are they doing?
Before we dive into what’s new with Spring ‘23, here’s a quick reminder of what will remain in a profile and what will eventually be available only in permission sets. I’ve also included some FAQs to help you understand where we’re going.
What will remain on a profile
- One-to-one relationships—login hours/IP ranges
- Defaults—record types, apps
- Page layout assignment—The future is App Builder/Dynamic Forms so we will not invest in bringing page layout assignment to permission sets.
What will be available only on permission sets after Retiring
- User permissions (system and app permissions)
- Object permissions (object Create, Read, Update, and Delete [CRUD])
- Field permissions (field-level security [FLS])
- Tabs
- Record types (not defaults)
- Apps (not defaults)
- Connected app access
- Apex classes
- Visualforce pages
- Custom permissions
ow can I migrate users profiles to permission sets and permission set groups?
- User Access Policies is a feature we have in Closed Beta (as of Spring ‘23) that will allow you to specify criteria about your users—either user attribute or entitlement based—to help you migrate your users. If you would like to participate in the Closed Beta for user access policies please fill out this form.
Will I be able to turn off the ability to use permissions on profiles before the official EOL once I have completed the migration?
- Yes! We are targeting the Spring ’24 release for this.
What about updates to the field creation wizard? It currently shows profiles instead of permission sets.
- We have a feature in Open Beta that you can turn on in the user management settings to set FLS on permission sets instead of profiles. This also applies to the “Set FLS button” on fields. We plan to make this Generally Available (GA) in Summer ‘23.
Are there upcoming changes to package/AppExchange installs? This shows only profiles today.
- We’re working on a solution for this that will likely include user access policies and some new features. More to come on this.
In Winter ’22, we released new features to make it easier to manage user access with permission sets, by making them available during field creation! Now, in Spring ’23, there are even MOAR enhancements that #AwesomeAdmins can use to manage user access.
More info – https://admin.salesforce.com/blog/2023/permissions-updates-learn-moar-spring-23
