You are here:
Permission Sets
Assign Program Management Module permission sets to give users the right level of access and keep your data secure.
- Program Management Module Permission Sets
A user only needs one Program Management Module permission set; however, it can be combined with other product permission sets as needed. Users can have only one profile, but they can have multiple permission sets. - Assign Permission Sets
Assign permission sets to users based on their profiles. - A Note About Open Orgs
If all users with a login to your Salesforce org can see all data in your org—that is, they can see all the records and fields—you have what's called an "open org." - Understand Access to Records
Use sharing rules to expand access to additional groups of users.
Program Management Module Permission Sets
A user only needs one Program Management Module permission set; however, it can be combined with other product permission sets as needed. Users can have only one profile, but they can have multiple permission sets.
You can assign permission sets to any user, regardless of their profile. PMM includes these permission sets:
If you want to extend access to program management records beyond what is included in the permission sets, we recommend adding sharing rules.
Assign Permission Sets
Assign permission sets to users based on their profiles.
To assign permission sets:
-
Click
, then click Setup. -
From Setup, enter Permission Sets in the Quick Find box, then click Permission Sets.
-
Select the permission set that you want to assign to users.
-
Click Manage Assignments, then Add Assignments.
-
Select the checkboxes next to the appropriate users.
-
Click Assign.
A Note About Open Orgs
If all users with a login to your Salesforce org can see all data in your org—that is, they can see all the records and fields—you have what's called an "open org."
PMM permission sets won’t limit user access in open orgs.
As an alternative, we recommend you use security and sharing settings to allow specific users to see records or fields based on criteria you specify. This more secure approach ensures client confidentiality, especially if you have general and fundraising staff using NPSP in your org. Assigning the Manage Programs permissions to your programs and management staff will keep your client data visibility restricted.
Understand Access to Records
Use sharing rules to expand access to additional groups of users.
Each record owner can manually share individual records with other users by selecting the Share button on the record. However, it’s often more efficient for an admin to share records with defined groups of users.
What does this mean for NPSP and PMM?
-
Additional permissions can be granted by assigning permission sets to users.
-
Access to records a user doesn’t own is first assigned by org-wide defaults. In PMM, these are public read/write. This means that all users who have access to the objects can view records for those objects, but only the record owners can edit them. Although these are the default settings, you may not want all users in your org to be able to see or edit records. Take some time to think about your sharing model and decide if you want to make it more restrictive.
