---
schema_version: "1"
id: fed027827359b55e97057d34301d846e037dea91e78d3b387ce5670b89c40c02
title: Set Up Your Users’ Object, User, and Field Permissions
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/security_data_access_mgmt.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.security_data_access_mgmt.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: d596f93e3f37ccb96d2c744e4c26d39913cbafa700e11ddc1f03169bdcae66e9
description: Salesforce provides a flexible, layered data sharing design so admins can control user access to data. Use profiles to configure default settings and layouts, then use permission sets and permission set groups to grant object, user, and field permissions. Salesforce also provides tools to automate, migrate, or report on your users’ permission assignments.
products:
  - Security
  - Salesforce Platform
release: "264"
---
# Set Up Your Users’ Object, User, and Field Permissions

Salesforce provides a flexible, layered data sharing design so admins can control user access to data. Use profiles to configure default settings and layouts, then use permission sets and permission set groups to grant object, user, and field permissions. Salesforce also provides tools to automate, migrate, or report on your users’ permission assignments.

![Banner with the text Manage Permissions](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/access/images/banner_manage_permissions.png)

![Tip](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/images/icon_tip.png)

Tip Setup with Agentforce can help you manage user access and permissions more efficiently. For more information, see [Setup with Agentforce](https://help.salesforce.com/s/articleView?id=xcloud.setup_agentforce_overview.htm&language=en_US) and [User Access Management in Setup with Agentforce](https://help.salesforce.com/s/articleView?id=xcloud.setup_agentforce_user_access.htm&language=en_US).

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
      <colgroup>
        <col style="width:33.33333333333333%">
        <col style="width:33.33333333333333%">
        <col style="width:33.33333333333333%">
      </colgroup>
      <tbody>
        <tr class="">
          <td class="slds-cell-wrap" style="vertical-align:top;">
            <p>
              <span style="vertical-align:text-bottom;display:inline-block;"><img style="margin-bottom:0;" src="https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/resources-global/_corporate/images/learning_maps/lm_start.png" alt="Icon representing the start of a journey"></span>
            </p>
            <p>
              <strong>Learn About Data Security</strong>
            </p>
            <p>
              <span style="vertical-align:text-bottom;display:inline-block;"><img style="height:35px;margin-bottom:0;" src="https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/resources-global/_corporate/images/learning_minimap/trailhead_minimap.png" alt="Icon representing Trailhead"></span>
              <a href="https://trailhead.salesforce.com/content/learn/modules/data_security" target="_blank">Data Security</a>
            </p>
            <p>
              <span style="vertical-align:text-bottom;display:inline-block;"><img style="margin-bottom:0;" src="https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/resources-global/_corporate/images/video.png" alt="Icon representing video"></span>
              <a href="https://salesforce.vidyard.com/watch/B1bQnMFg2VyZq7V6zXQjPg" target="_blank">Who Sees What Series: Lightning Experience</a>
            </p>
            <p>
              <a href="https://help.salesforce.com/s/articleView?id=platform.permissions_about_users_access.htm&amp;release=264.0.0&amp;type=5" title="User, object, and field permissions and access settings can be specified in profiles and permission sets. To use them effectively, understand the differences between profiles and permission sets.">Permissions and Access Settings</a>
            </p>
            <p style="margin-bottom:0;">
              <a href="https://architect.salesforce.com/well-architected/trusted/secure" target="_blank">Salesforce Well-Architected: Secure</a>
            </p>
          </td>

          <td class="slds-cell-wrap" style="vertical-align:top;">
            <p>
              <span style="vertical-align:text-bottom;display:inline-block;"><img style="margin-bottom:0;" src="https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/resources-global/_corporate/images/learning_maps/lm_analyze_2.png" alt="Icon representing a magnifying glass"></span>
            </p>
            <p>
              <strong>Plan Your Access Control
                Setup</strong>
            </p>
            <p style="margin-bottom:0;">
              <a href="https://help.salesforce.com/s/articleView?id=platform.perm_sets_best_practices.htm&amp;release=264.0.0&amp;type=5" title="Review these recommendations on setting up your permission sets and permission set groups.">Guidelines for Creating Permission Sets and Permission Set Groups</a>
            </p>
          </td>

          <td class="slds-cell-wrap" style="vertical-align:top;">
            <p>
              <span style="vertical-align:text-bottom;display:inline-block;"><img style="margin-bottom:0;" src="https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/resources-global/_corporate/images/learning_maps/lm_develop_1.png" alt="Icon representing gears"></span>
            </p>
            <p>
              <strong>Set Up Default Settings and Layouts with
                Profiles</strong>
            </p>
            <p>
              <a href="https://help.salesforce.com/s/articleView?id=platform.admin_userprofiles.htm&amp;release=264.0.0&amp;type=5" title="Profiles define default settings for users. When you create users, you assign a profile to each one.">Profiles</a>
            </p>
            <p>
              <a href="https://help.salesforce.com/s/articleView?id=platform.standard_profiles.htm&amp;release=264.0.0&amp;type=5" title="Every Salesforce org includes standard profiles that you can assign to users. Edits to standard profiles are limited to certain settings.">Standard Profiles</a>
            </p>
            <p style="margin-bottom:0;">
              <a href="https://help.salesforce.com/s/articleView?id=platform.users_profiles_using_enhanced_ui.htm&amp;release=264.0.0&amp;type=5" title="Configure assigned apps, record types, page layouts, and other default settings in profiles so that assigned users can see the data and apps required to complete their work.">Configure Default Settings in Profiles</a>
            </p>
          </td>

        </tr>
        <tr class="">
          <td class="slds-cell-wrap" style="vertical-align:top;">
            <p>
              <span style="vertical-align:text-bottom;display:inline-block;"><img style="margin-bottom:0;" src="https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/resources-global/_corporate/images/learning_maps/lm_package_2.png" alt="Icon representing a Salesforce Setup page"></span>
            </p>
            <p>
              <strong>Grant
                Permissions</strong>
            </p>
            <p>
              <a href="https://help.salesforce.com/s/articleView?id=platform.perm_sets_overview.htm&amp;release=264.0.0&amp;type=5" title="A permission set is a collection of settings and permissions that give users access to various tools and functions. Permission sets extend users’ functional access without changing their profiles and are the recommended way to manage your users’ permissions.">Permission Sets</a>
            </p>
            <p>
              <a href="https://help.salesforce.com/s/articleView?id=platform.perm_sets_permissions_access.htm&amp;release=264.0.0&amp;type=5" title="Configure object, field, and user permissions as well as other access and feature settings in permission sets.">Configure Permissions and Access in Permission Sets</a>
            </p>
            <p>
              <a href="https://help.salesforce.com/s/articleView?id=platform.perm_set_groups.htm&amp;release=264.0.0&amp;type=5" title="A permission set group streamlines permissions assignment and management. Use a permission set group to bundle permission sets together based on user job personas or roles. Permission set groups make managing access easier when you're maintaining multiple personas with overlapping permissions.">Permission Set Groups</a>
            </p>
            <p>
              <a href="https://help.salesforce.com/s/articleView?id=platform.permissions_assign_expire_how.htm&amp;release=264.0.0&amp;type=5" title="Use the assignment expiration option to determine the effective time period that users receive certain permissions. You can set assignment expiration dates via permission sets and permission set groups. Assigned users receive access to all aggregate permissions until the expiration date.">Set Assignment Expiration Details for Users in Permission Sets and Permission Set Groups</a>
            </p>
            <p style="margin-bottom:0;">
              <a href="https://help.salesforce.com/s/articleView?id=platform.perm_sets_session_use.htm&amp;release=264.0.0&amp;type=5" title="A session-based permission set applies to a specific user session to grant someone functional access to permissions.">Session-Based Permission Sets</a>
            </p>
          </td>

          <td class="slds-cell-wrap" style="vertical-align:top;">
            <p>
              <span style="vertical-align:text-bottom;display:inline-block;"><img style="margin-bottom:0;" src="https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/resources-global/_corporate/images/learning_maps/lm_user_2.png" alt="Icon representing a user"></span>
            </p>
            <p>
              <strong>Manage Users’ Assigned
                Permissions</strong>
            </p>
            <p>
              <a href="https://help.salesforce.com/s/articleView?id=platform.users_access_summary.htm&amp;release=264.0.0&amp;type=5" title="To make managing permissions and troubleshooting access easier, in the User Access Summary, you can see a consolidated view of a user’s key details and assigned permissions and tabs. You can also manage the user’s assigned permission sets, permission set groups, public groups, and queues.">View a User’s Access Summary</a>
            </p>
            <p>
              <a href="https://help.salesforce.com/s/articleView?id=platform.perm_sets_summary_page.htm&amp;release=264.0.0&amp;type=5" title="To help you manage your users’ permissions, you can see and update all object, user, field, and custom permissions that are enabled for a permission set or permission set group in its summary page. You can also manage which permission set groups the permission set is included in and vice versa.">Manage Permissions in the Permission Set and Permission Set Group Access Summaries</a>
            </p>
            <p>
              <a href="https://help.salesforce.com/s/articleView?id=platform.perm_sets_assignment_reporting.htm&amp;release=264.0.0&amp;type=5" title="To help you manage users, report on your users’ assigned custom permission set and permission set groups. Create a custom report type before building reports on custom permission set or permission set group assignments.">Report on Custom Permission Set and Permission Set Group Assignments</a>
            </p>
            <p>
              <a href="https://help.salesforce.com/s/articleView?id=platform.perm_sets_manage_assignments.htm&amp;release=264.0.0&amp;type=5" title="You can assign permission sets to a single user from the user detail page or assign multiple users to a permission set from any permission set page.">Manage Permission Set Assignments</a>
            </p>
            <p style="margin-bottom:0;">
              <a href="https://help.salesforce.com/s/articleView?id=platform.permissions_revoking_access.htm&amp;release=264.0.0&amp;type=5" title="You can use profiles, permission sets, and permission set groups to grant access but not to deny access. Permissions granted from profiles, permission sets, and permission set groups are honored. For example, if Transfer Record isn't enabled in a profile but is enabled in a permission set, the assigned user can transfer records regardless of whether the user owns them. To revoke a permission, you must remove all instances of the permission from the user.">Revoke Permissions and Access</a>
            </p>
          </td>

          <td class="slds-cell-wrap" style="vertical-align:top;">
            <p>
              <span style="vertical-align:text-bottom;display:inline-block;"><img style="margin-bottom:0;" src="https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/resources-global/_corporate/images/learning_maps/lm_audience_end_2.png" alt="Icon representing multiple users"></span>
            </p>
            <p>
              <strong>Migrate or Automate Access
                Assignments</strong>
            </p>
            <p>
              <a href="https://help.salesforce.com/s/articleView?id=platform.perm_user_access_policies.htm&amp;release=264.0.0&amp;type=5" title="With user access policies, you define aggregated access for your users in a single operation. Automate your users’ assignments to permission set licenses, permission sets, permission set groups, package licenses, queues, and public groups. You can create policies that grant or remove access whenever users are created or updated, or in a one-time manual migration.">User Access Policies</a>
            </p>
            <p>
              <a href="https://help.salesforce.com/s/articleView?id=platform.perm_manual_user_access_policies.htm&amp;release=264.0.0&amp;type=5" title="Migrate or change users’ assignments to access mechanisms with a one-time, manual application of a user access policy.">Manually Grant or Revoke Access with a User Access Policy</a>
            </p>
            <p style="margin-bottom:0;">
              <a href="https://help.salesforce.com/s/articleView?id=platform.perm_active_user_access_policy.htm&amp;release=264.0.0&amp;type=5" title="Grant or revoke access for a specified set of users through a triggered event, such as a created or updated user record.">Automatically Grant or Revoke Access with a User Access Policy</a>
            </p>
          </td>

        </tr>
        <tr class="">
          <td class="slds-cell-wrap" style="vertical-align:top;">
            <p>
              <span style="vertical-align:text-bottom;display:inline-block;"><img style="margin-bottom:0;" src="https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-access-264-0-0-production-enus/a92be132-3cbc-412a-9262-130636120c14/resources-global/_corporate/images/learning_maps/lm_analyze_end_1.png" alt="Icon representing multiple users"></span>
            </p>
            <p>
              <strong>Troubleshoot Access Control
                Issues</strong>
            </p>
            <p>
              <a href="https://help.salesforce.com/s/articleView?id=platform.admin_insufficient_privileges_map.htm&amp;release=264.0.0&amp;type=5" title="Your users can experience access issues or insufficient privileges errors if object permissions or record-access features aren’t configured correctly.">Troubleshoot Object and Record Access Issues</a>
            </p>
            <p>
              <a href="https://help.salesforce.com/s/articleView?id=platform.admin_insufficient_privileges_object.htm&amp;release=264.0.0&amp;type=5" title="If your users have issues completing a task or accessing a feature, review their assigned permissions.">Troubleshoot Feature Access Issues</a>
            </p>
            <p>
              <a href="https://help.salesforce.com/s/articleView?id=platform.admin_insufficient_privileges_field.htm&amp;release=264.0.0&amp;type=5" title="Your users can experience access issues or insufficient privileges errors if field permissions or other features that control fields aren’t configured correctly.">Troubleshoot Field Access Issues</a>
            </p>
            <p>
              <a href="https://help.salesforce.com/s/articleView?id=platform.admin_troubleshoot_considerations.htm&amp;release=264.0.0&amp;type=5" title="Review these object-specific considerations and additional features that can affect what your users can see or access.">Additional Considerations for Troubleshooting Access Issues</a>
            </p>
            <p style="margin-bottom:0;">
              <a href="https://help.salesforce.com/s/articleView?id=platform.admin_troubleshoot_queries.htm&amp;release=264.0.0&amp;type=5" title="Review these sample queries on returning information about users’ permissions or access.">Example Queries for Troubleshooting Access Issues</a>
            </p>
          </td>

          <td class="slds-cell-wrap" style="vertical-align:top;">&nbsp;</td>

          <td class="slds-cell-wrap" style="vertical-align:top;">&nbsp;</td>

        </tr>
      </tbody>
    </table>