Permission Set Group FAQs

When Do I Use a Permission Set Group Instead of a Permission Set?

Use a permission set group to bundle permission sets based on logical user groups and the tasks users perform.

For example, you can group three permission sets together for users in a sales org: Sales Cloud Einstein, Survey Creator, and a permission set based on the Standard User profile. Assign the single group to your users instead of the three different permission sets.

Partners can organize permissions into groups and include them in managed packages. Upgrade the package with updated permissions when needed. Partners can still allow subscriber administrators to extend the groups without creating more permission sets.

Can I Assign a User to a Permission Set Group That Has Permissions from a Permission Set License?

Yes. Let's say you have a group that contains the Sales Cloud Einstein and the Survey Creator permission sets. Ensure that the users assigned to the group are also assigned the associated permission set licenses.

If you try to assign a group to a user who doesn’t have a license needed for the permissions in the group, you receive an assignment error.

Can I Include a Session-Based Permission Set in a Permission Set Group?

Yes. However, because the assigned permission set group users receive the permissions in the session-based permission set, the users don’t need a session to activate the permissions.

You can continue to assign the session-based permission set to users outside of the group. These users still require session activation.