Comparing Permission Differences

After the appropriate permission types have been added to the relevant selections, you can compare the permission differences at object and field level.

You can identify the permissions that are only present in one of the selections and can optionally save the permission differences from each selection.

You group the following permission types in the Permission Workbench:

  • Selection 1:
    • ApexLib Foundations - Batch Process permission set
    • Certinia - OIM - Accounts Receivable permission set group
    • SCM SuperUser (Platform User) profile
    • Security User
  • Selection 2:
    • ApexLib Foundations - Batch Process - Read Access permission set
    • Certinia - OIM - Accounts Payable permission set group
    • SCM API (Platform User) profile
    • Integration User

The following object permission differences exist.

Permission Type

Permission Level

 Object Selection 1 Only

Selection 2 Only
Permission Set Object Company - Read
Company Credit Terms - Read, Create, Edit, Delete
Foundations Batch Process Read, View All -
Foundations Batch Process Detail Read, View All -
Permission Set Group Object Billing Document Line Item Create, Edit, Delete View All
Profile Object Account Create, Edit, Delete View All
Feedback Question Set Delete View All
User Object Scheduled Job Run Read, View All -

The following field permission differences exist.

Permission Type

Permission Level

 Field

Object

Selection 1 Only

Selection 2 Only
Permission Set Field Title Contact - Read, Edit
Permission Set Group Field Account Number Account Read -
Profile Field Parent Case ID Case - Read
User Field Tax Registration Number Company Tax Information - Read, Edit

Best Practice

We recommend you turn off debug logs when comparing large permission types in Permission Workbench. For more information about debug logs, see the Salesforce Help.

We recommend that you do not compare the standard System Administrator profile with users as this can affect performance.

Comparing Permissions

To compare permission differences between the selections, perform the following steps:

  1. Add permission types to Selection 1 and Selection 2 as described in Selecting Permission Types to Compare.
  2. Click Compare.
    Note: For permission types that contain a large volume of permissions, the action can take a while to process.
  3. When the differences have been calculated, select whether you want to view field or object permissions.
  4. [Optional] Enter the API name of a specific field or object to view permission differences for that item. The results are ordered alphabetically according to the object name. When viewing field permissions, the search returns results that match both field and object name.
  5. [Optional] To display field and object labels in the results, select Show Labels. In some circumstances, for example, if you do not have permission to view an object or field, the associated label cannot be displayed. This is indicated by a dash (–) in the Label column.
  6. Review the permission differences.

    The following Salesforce standard objects are not displayed in the Permission Workbench. When saving differences or merging permissions for permission types that contain these objects, we recommend that you add the relevant permissions to the saved output manually.

    • Address
    • Coaching
    • Feedback
    • Feedback Questions
    • Feedback Question Sets
    • Feedback Requests
    • Feedback Templates
    • Goal Links
    • Goals
    • Metric Data Links
    • Metrics
    • Performance Cycles
    • Reward Funds
    • Reward Fund Types
    • Rewards

    Some standard objects might not be available in your org.

  7. To save the unique values for a particular selection, see Saving Permission Selections.