--- schema_version: "1" id: bbb0ddf015f1439c0a1ae59fb437f7841a9aab1f49c58c25358e0bd64660d500 title: Revoke Permissions and Access collection: admin version: current locale: en-us portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/permissions_revoking_access.md canonical_url: https://help.salesforce.com/s/articleView?id=platform.permissions_revoking_access.htm&release=264.0.0&type=5 source_site: help.salesforce.com content_type: documentation content_hash: 26ffa24fe42e3ed91ad4167231e6f42f66db004135e2773c4e957223eff84815 description: You can use profiles, permission sets, and permission set groups to grant access but not to deny access. Permissions granted from profiles, permission sets, and permission set groups are honored. For example, if Transfer Record isn't enabled in a profile but is enabled in a permission set, the assigned user can transfer records regardless of whether the user owns them. To revoke a permission, you must remove all instances of the permission from the user. products: - Security - Salesforce Platform release: "264" --- # Revoke Permissions and Access You can use profiles, permission sets, and permission set groups to grant access but not to deny access. Permissions granted from profiles, permission sets, and permission set groups are honored. For example, if Transfer Record isn't enabled in a profile but is enabled in a permission set, the assigned user can transfer records regardless of whether the user owns them. To revoke a permission, you must remove all instances of the permission from the user. ### Required Editions
Available in: both Salesforce Classic and Lightning Experience
Available in: Essentials, Contact Manager, Professional, Group, Enterprise, Performance, Unlimited, Developer, and Database.com Editions
Action Consequence
Disable a permission or remove an access setting in the profile and any permission sets and permission set groups that are assigned to the user. The permission or access setting is disabled for all other users assigned to the profile, permission sets, or permission set groups.

If a permission or access setting is enabled in the user's profile, assign a different profile to the user.

AND

If the permission or access setting is enabled in any permission sets or permission set groups that are assigned to the user, remove the permission set and permission set group assignments from the user.

 The user may lose other permissions or access settings associated with the profile, permission sets, or permission set groups.
To see a user’s assigned permissions, from the Users page in Setup, select a user, and then click **View Summary**. To see all included permissions in a permission set or permission set group, on the detail page for the specific permission set or permission set group, click **View Summary**. To see all users assigned to a permission set or permission set group, on the detail page, click **Manage Assignments**. To resolve the consequence in either case, consider all possible options. For example, you can clone the assigned profile or any assigned permission sets where the permission or access setting is enabled. Then, disable the permission or access setting, and assign the cloned profile or permission sets to the user. Another option is use muting permission sets in permission set groups to mute selected permissions for the users assigned to the permission set group. When possible, we recommend that you use permission sets and permission set groups to manage your users’ permissions. Because you can reuse smaller permission set building blocks, you can avoid creating dozens or even hundreds of profiles for each user and job function. #### See Also - [Permissions and Access Settings](https://help.salesforce.com/s/articleView?id=platform.permissions_about_users_access.htm&release=264.0.0&type=5 "User, object, and field permissions and access settings can be specified in profiles and permission sets. To use them effectively, understand the differences between profiles and permission sets.") - [Manage Permission Set Assignments](https://help.salesforce.com/s/articleView?id=platform.perm_sets_manage_assignments.htm&release=264.0.0&type=5 "You can assign permission sets to a single user from the user detail page or assign multiple users to a permission set from any permission set page.")