Salesforce Admin – Users, Profiles & Permission Sets Questions

User management is a critical aspect of Salesforce administration, involving the configuration of users, profiles, and permission sets to ensure appropriate access control. These questions cover user creation and management, profile configuration, permission set usage, login restrictions, role differences, and delegated administration. Understanding these concepts is essential for maintaining a secure and well-organized Salesforce environment.

Users, Profiles & Permission Sets - Q&A

  1. Q1. What is a User in Salesforce?
    Ans: A User is anyone who logs in to Salesforce using credentials. Each user has a unique username and is assigned a profile that controls access.
  2. Q2. What is the role of a Profile in Salesforce?
    Ans: Profiles define baseline permissions—like object-level access (CRUD), field-level security, and login hours. Every user must be assigned exactly one profile.
  3. Q3. What are Permission Sets? How do they differ from Profiles?
    Ans: Permission Sets grant additional permissions to users without changing their profile. Unlike Profiles (1 per user), a user can have multiple Permission Sets, allowing flexible access control.
  4. Q4. When would you use a Permission Set over creating a new Profile?
    Ans: We use Permission Sets when we need to grant extra access to a few users temporarily or dynamically—like enabling Reports access for a few users without creating a new profile.
  5. Q5. Can two users have the same profile but different permissions?
    Ans: Yes, if they have the same Profile but are assigned different Permission Sets, their effective access can vary.
  6. Q6. How do Login Hours and IP Ranges affect Users?
    Ans: Login Hours restrict user logins to specific times. Login IP Ranges restrict access from unknown IPs. Both are set at the Profile level to enforce security policies.
  7. Q7. What is a Role and how is it different from a Profile?
    Ans: A Role determines record-level access via the role hierarchy (who can see whose records). A Profile controls object- and field-level access.
  8. Q8. What is the difference between a Profile and a Role?
    Ans: A Profile controls what a user can do (like read or edit objects and fields), while a Role controls what a user can see (record-level visibility). Profiles manage functional access; Roles manage data visibility.
  9. Q9. Can a user be inactive in Salesforce? What happens?
    Ans: Yes, setting a user as inactive revokes their login ability but retains their record ownership and history for auditing.
  10. Q10. What is Delegated Administration?
    Ans: Delegated Admins are users with limited admin capabilities—like managing users in specific roles, resetting passwords, or assigning certain permission sets—without being full admins.
  11. Q11. What is a Permission Set Group?
    Ans: It's a collection of permission sets bundled together. It simplifies assigning multiple permissions at once and helps manage access consistently across users.

Back to Admin Home