---
schema_version: "1"
id: adaa4036cb6a4b7761296b42700af93c3a816ada70272fd91acaa600a794c8fc
title: Create Session-Based Permission Set Groups
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/perm_set_groups_create_session.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.perm_set_groups_create_session.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 0a6bb67a859b42b2b5256096c7a1b6fbd1ef1f999acaf9303176a07b2e8d66e2
description: To allow users functional access to permission sets only during specified sessions, create a session-based permission set group. For example, grant access to an application only during an authenticated session. Then activate the session-based permission set group in a flow or via the API.
products:
  - Security
  - Salesforce Platform
release: "264"
---
# Create Session-Based Permission Set Groups

To allow users functional access to permission sets only during specified sessions, create a session-based permission set group. For example, grant access to an application only during an authenticated session. Then activate the session-based permission set group in a flow or via the API.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: both Salesforce Classic (<a href="https://help.salesforce.com/articleView?id=overview_edition_lex_only.htm&amp;language=en_US" target="_blank">not available in all orgs</a>) and Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Contact Manager</strong>, <strong>Group</strong>, <strong>Essentials</strong>, <strong>Professional</strong>, <strong>Enterprise</strong>, <strong>Performance</strong>, <strong>Unlimited</strong>, <strong>Developer</strong>, and <strong>Database.com</strong> Editions</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d45601e92">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d45601e92 ">To create permission sets:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d45601e92 ">Manage Profiles and Permission Sets</td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d45601e92 ">To assign permission sets:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d45601e92 ">Assign Permission Sets</td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d45601e92 ">To create a permission set group:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d45601e92 ">Manage Profiles and Permission Sets</td>

          </tr>
        </tbody>
      </table>

Before beginning, check out [Session-Based Permission Set Groups](https://help.salesforce.com/s/articleView?id=platform.perm_set_groups_session_use.htm&release=264.0.0&type=5 "A session-based permission set group applies to a specific user session and grants users functional access to the permission sets included in the permission set group.") to learn when to use them.

1. Create a permission set group and make sure to select **Session Activation Required**.
2. Assign permission sets to the permission set group.
    
    If you include a regular permission set in your session-based permission set group, the permission set group makes the permission set session-based. Users assigned to the permission set group have access to the permission set for the duration of the session.
3. Assign the permission set group to users.
    
    Before assigning session-based permission set groups to users, ensure that they can meet the conditions of the permission sets in the permission set group.

The session-based permission set group isn’t in effect until a session is activated for it. To activate a session, provide a value for the PermissionSetGroupId field on the SessionPermSetActivation SOAP API. Or, you can create a flow that activates and deactivates the session-based permission set group.