Automate User to Permission Set, Group, Queue Assignment in Salesforce | User Access Policies 🚀 🔥

[@TechnicalPotpourri]

📌 Collection Filter and Sort in Salesforce Flow - kzbin.info/www/bejne/oKmymIp7eZqWj6c 📌 HTTP Post Call From Salesforce Flow - kzbin.info/www/bejne/i3SrgqChi9Zqr9E 📌 Summer 23 Release | How To Add Named Credentials To Permission Set Using Principals - kzbin.info/www/bejne/a2TUZHxjl6-imM0 📌 Salesforce Summer 23 Release Playlist - kzbin.info/aero/PLeX6D9nzyNed-HKZHorvmfGvxWwSZNNLQ 📌 External Services in Flow - HTTP Callout | Spring 23 Feature - kzbin.info/www/bejne/pF7ZeXSnp5t-n6s 📌 Salesforce Release Playlist - kzbin.info/aero/PLeX6D9nzyNecUEtcz-vtB8Hf6q1p19Qhx

[@saikatmandal5539]

Very helpful video. Great going Mr. Deb

[@TechnicalPotpourri]

Glad you liked it

[@Jaytime-v1x]

Thanks heaps.. i didn't even know these sort of features existed in SFDC

[@TechnicalPotpourri]

You welcome.

[@romilservio2149]

This will definitely help out a lot. I could see us using this to assign permission set group to an experience site portal user. Thank you for sharing.

[@TechnicalPotpourri]

Glad it was helpful!

[@kasijangiti3427]

Detailed Explanation SIr. Keep doing the videos like this. It will be very helpful for us. Thank you for your effort.

[@TechnicalPotpourri]

Thank you. Happy that you liked the video.

[@PJ_PARA]

This is a really great video - particularly the understanding of what, to me, is a bug in Salesforce. It shows you have gone the extra mile to really check out the potential use cases in this video. I was thinking about using this for RBAC where, when we change the role of a user, we assign an appropriate PS Group. But that will not work because it will fail to both deassign the previous group and assign the new group as these will exist in two separate User Access Policies and only the latest will fire. Unfortunately, due to the restriction of only running one policy, I don't think there are many sensible use cases for this functionality. Salesforce also don't guarantee releasing Permission Set Licenses on revoke so, to me, this functionality is pointless until these issues are fixed.

[@TechnicalPotpourri]

Thank you !!

[@massimotarquini5157]

are OR conditions or custom logic supported? the only possible option i see is a single criteria rule and that s it OR is not supported as far as i can see? thanks sir

[@kalyanisundaram3761]

I want to create a public group that should be assigned to particular permission sets. so that i can remove the users from the group , not individually go and remove the permission set, is that possible ?. Please advise

[@massimotarquini1168]

great video sir. can these policies be migrated with change sets?

[@TechnicalPotpourri]

I am not sure, but I can check and let you know

[@davidi6773]

Hey! Do you know if there is a way to assign Permission Set to profiles or if it's going to be available soon? Thank you! Great video.

[@TechnicalPotpourri]

I saw one Idea open. Not sure when it will be delivered from Salesforce side.

[@bnindu]

@sudip I love this video which would be a huge usecase for JML. I love the video explanation , usecase and text which shows up quickly. Keep doing this great work!! i would love to reference your video for a jml usecase. Let me know if that is okay with you?

[@TechnicalPotpourri]

Glad you liked it. Feel free to use the video if you think it will help your usecase or audience.

[@devanshmarkan4579]

I have a doubt. I want to revoke a user's access to a public group if a permission set assignment is deleted. I did try it as filter being "Permission Set NOT EQUAL TO thatnameofPS, and action was "Revoke Public Group. But it's not working. What could be the problem?

[@TechnicalPotpourri]

I think permission set not equals to something is a very broad criteria which might end up being true for a good amount of users.

[@awesomekj5812]

Do you know if we can create some kind of trigger or apex to de provision license or permission set without manually removing them from users?

[@TechnicalPotpourri]

Yes you can write trigger or flow to add/remove permission set from users depending on the condition.

[@awesomekj5812]

@@TechnicalPotpourri Is it like straighforward removing them from permissionsetassignment object ? I was hoping User Access Policies might have an object to check and remove from there.

[@TechnicalPotpourri]

It will be like removing it from permissionsetassignment object

[@khushimuneer-y6b]

Hi, I tried using this but could not locate my custom object (picklist values) to reflect in "Select Additional User Field Filters". Does this have to be checkbox the way in your example has been showcased ?

[@TechnicalPotpourri]

You can use filters on standard and custom user fields of type Checkbox, Number, or Text. Picklist is not supported. Here is the documentation: help.salesforce.com/s/articleView?id=sf.perm_manual_user_access_policies.htm&type=5

[@Esther-Hov]

@@TechnicalPotpourri Picklist is now supported per documentation. Must have come with recent update.

[@TechnicalPotpourri]

Thank you @Esther-Hov for the recent news. Yes with new update, picklist is now supported.

[@TechnicalPotpourri]

@@Esther-Hov Yes it is supported since last release.

[@pvnaiduplk5454]

I could not able to perform for the lookup field ? Can you help with this ?

[@TechnicalPotpourri]

What is the problem ?!

[@pvnaiduplk5454]

@ when iam trying to select the lookup field in the filter it is not showing the field.

[@awesomekj5812]

can you do a case where this assignment fails ? Where would you see the errors ?

[@TechnicalPotpourri]

I am not sure what do you mean by the assignment fails. Can you please elaborate your question? Thanks !!

[@awesomekj5812]

@@TechnicalPotpourri I meant to say if you run the user access policies and for some reason it fails to assign right permission set to users. Where would you go to see the errors before you get to know about them from users itself ?