Skip to content

How do we assign one specific functional permission to a permission set, rather than a broad predefined role?

Answer

Build the permission set from the specific actions the task needs, and add the predefined role only if it's genuinely a good match — starting from "the closest existing role" and trimming is usually harder to get right than starting from the actual requirement. See understand permission sets.

← Browse Security and access questions