Loading

Find Permission Sets Containing CRM Analytics Permissions Using SOQL

Veröffentlichungsdatum: Jun 29, 2026
Beschreibung

Overview
In Salesforce, a Permission Set License (PSL) cannot be removed from a user unless all permissions granted by that specific license are first removed. Attempting to remove a PSL while permissions are still assigned results in an error similar to:


"You can't remove the [PERMISSION_SET_LICENSE_LABEL] permission set license from [USER_NAME] until you remove the permission that requires the permission set license."

To resolve this, you need to identify which Permission Sets assigned to the user contain CRM Analytics-specific permissions. CRM Analytics permissions include roles such as CRM Analytics user, admin, dashboard editor, upload user, and ELT editor. You can find these Permission Sets using a SOQL (Salesforce Object Query Language) query.

Lösung

How to Identify and Remove CRM Analytics Permission Sets
The following SOQL query returns the list of Permission Sets assigned to a target user that contain one or more CRM Analytics permissions. Run this query in the Developer Console or Workbench.

SELECT Assignee.Name, PermissionSet.Label, PermissionSet.Id FROM PermissionSetAssignment WHERE PermissionSetId in (SELECT Id FROM PermissionSet WHERE PermissionsInsightsAppUser = true OR PermissionsInsightsAppAdmin = true OR PermissionsAddAnalyticsRemoteConnections = true OR PermissionsInsightsAppDashboardEditor = true OR PermissionsInsightsAppUploadUser = true OR PermissionsInsightsCreateApplication = true OR PermissionsInsightsAppEltEditor = true OR PermissionsWaveTabularDownload = true OR PermissionsManageTemplatedApp = true OR PermissionsUseTemplatedApp = true) AND AssigneeId = 'USER_ID'


The query searches the PermissionSetAssignment object, filtering for Permission Sets that include any of these CRM Analytics flags: InsightsAppUser, InsightsAppAdmin, AddAnalyticsRemoteConnections, InsightsAppDashboardEditor, InsightsAppUploadUser, InsightsCreateApplication, InsightsAppEltEditor, WaveTabularDownload, ManageTemplatedApp, or UseTemplatedApp — and filters to only the assignments for the target user by their User ID.
Replace "USER_ID" in the query with the 18-character Salesforce ID of the target user.
If your org has Trend Reports in Analytics enabled, also include the PermissionsWaveTrendReports flag in the query's inner SELECT to ensure those Permission Sets are also returned.
Once you have the list of Permission Sets from the query results, unassign each Permission Set from the user. After all CRM Analytics permissions are removed, you can successfully remove the CRM Analytics Permission Set License from the user.
Resources

  • Permission Sets
  • Manage Permission Set Assignments
  • PermissionSet Object
  • PermissionSetAssignment Object
  • Trend Reports in Analytics
Nummer des Knowledge-Artikels

000380812

 
Laden
Salesforce Help | Article