User Permissions

Profiles and Permission Sets control what Salesforce Users can see and do. The Metazoa Snapshot Org Management product can compare Salesforce Profiles and Permission Sets, bulk edit permission values, and combine a User Profile with their assigned Permission Sets in order to see the true combined security permissions.

Compare Salesforce
Profiles and Permission Sets

The Profiles and Permission Sets report shows all of your Profiles or Permission Sets down the left-hand column and the selected Metadata sub types across the top. The sub types include: Apex Page Accesses, Apex Page Accesses, Application Visibility, Field Permissions, Layout Assignments, Object Permissions, Record Type Visibility, Tab Visibility, User Permissions, and Custom Permissions.

These reports document all of the characteristics of your Profiles and Permission Sets in a single easy to read tabular report. Looking down any column will show the permissions for a single Metadata asset by Profile or Permission Set. Reading across any row will show the permissions for a single Profile or Permission Set by each Metadata asset. The report can be saved either in HTML, PDF, or CSV. As usual, all of these reports can be scheduled and automated for archive or email purposes.

An administrator can assign any number of Permission Sets to a user. Permission Sets are similar to Profiles. They are used to grant additional permissions for special situations. The Snapshot Profiles and Permission Sets dialog includes a Combined Security Report that shows the base Profile and each assigned Permission Set contribute to the actual security permissions for selected users. This is a key report for security and compliance. For example, a company could document which users have been granted access to fields that contain customer information. Permission Sets that changed the base Profile are shown in green, Permission Sets that were not effective are shown in red.

Comparing Profiles and Permission Sets with Snapshot


Snapshot is a powerful tool that facilitates the comparison of profiles and permission sets within Salesforce deployment pipelines. It helps in viewing, editing, comparing, and reporting on various profile and permission set characteristics, such as object permissions, Apex class access, field permissions, and more.

Viewing Profiles and Permission Sets

  1. Within Snapshot’s deployment pipeline, you can view the profiles by right-clicking any item and selecting ‘View Profiles’.
  2. A matrix report will be displayed with profiles listed on the left-hand side and characteristics such as object permissions, Apex class accesses, page accesses, app visibility, field permissions, layout assignments, record types, tabs, user permissions, and custom permissions across the top.
  3. Snapshot allows you to view either all of the profiles or filter them by specific characteristics.
  4. The generated table can be exported in CSV, PDF, or HTML format for sharing with team members.

Editing Profiles

  1. Snapshot provides editing palettes for making changes to various permissions.
  2. For instance, to edit object permissions, select a block of permissions by clicking the checkboxes and choose ‘Apply’.
  3. The edited permissions can be pushed to any Salesforce organization.

Comparing Profiles Between Source and Destination

  1. To compare profiles between a source and a destination, right-click on the arrow between them and select ‘Compare Profiles’.
  2. This will open a side-by-side view of profiles by their characteristics (e.g., object permissions) in two different Salesforce organizations.
  3. There is also an option to switch to a single table view, which stacks the source and destination columns horizontally. This view is particularly useful for exporting the data as a CSV.

Permission Reports

  1. Snapshot offers several reports that show various permissions. The first set of reports displays profiles on the left-hand side and various characteristics across the top (similar to the matrix report mentioned earlier).
  2. Users can select the desired reports to include them in the display report tab automatically.
  3. Reports can be saved or scheduled to be sent to specific groups for keeping them informed.

Combined Security Reports

  1. A special category within the permission reports is the Combined Security Reports. These reports show the profile and associated permission sets for a specific user.
  2. For example, you can see if a user has read and view access based on their profile, and what additional access they have been granted through permission sets.
  3. Permission sets that result in changes are shown in green, while those that are ineffective are shown in red.
  4. Combined Security Reports are vital for organizational security as they help in understanding the true permissions of a user at a glance.


Snapshot is an essential tool for managing profiles and permission sets in Salesforce. Through its various features including viewing, editing, comparing, and reporting, it provides comprehensive insights into the permissions and configurations, thereby ensuring better security and compliance in Salesforce deployments.

Learn More!

Snapshot provides powerful tools for Salesforce Administrators that help manage the change and release process, visualize org complexity, improve security and compliance, and lower the total cost of Org ownership. Visit the AppExchange to start a 14 day free trial or click the button below to schedule a demo.

🎉 Congratulations! 🎉

You’ve successfully completed the Metazoa Metadata Studio Certification Class. With the skills you’ve acquired, you’re now adept at harnessing the power of Metazoa’s Metadata Studio, seamlessly integrating artificial intelligence into Salesforce org management. You have earned you a certificate! Well done, and we wish you continued success in your future endeavors!