21

When opening the "Effective Permissions" page from a User record, all objects the user has access to are displayed. For each object, a subpage named "By Permission Set" shows which permission sets grant access to that object—providing a clear traceability of the source of permissions.


A similar level of transparency is desired on the "Permission Set" page.


Currently, when a permission set is opened, the page is divided into three visual sections:

  • A list of all object permissions
  • Included and excluded permission sets
  • A resulting Permission Tree


There is also an action called "View All Permissions", which opens a compiled list of effective permissions based on all included and excluded sets. However, this page lacks an important capability: it does not indicate which permission sets contribute to each effective permission.


Proposal:

Enhance the "View All Permissions" page by introducing a subpage, similar to the "By Permission Set" view from the User context. This new element would, for each effective permission, list all permission sets that contribute to it—whether directly or through inclusion. This would greatly improve traceability and help users answer the question:

“Which permission sets grant this effective permission?”

This would be especially useful for debugging complex permission hierarchies and ensuring compliance with least privilege principles.

STATUS DETAILS
New