Profile and permission sets summary
Generally, permissions and access settings can be specified for users at profile level and at individual user permission set level. Although certain permissions and access settings can only be specified in profiles. A summary of the permission and settings types that are available in Profiles and Permission Sets can be seen in the following table:
Permission / Setting Type |
Available in Profiles |
Available in Permission Sets |
Assigned apps |
Yes |
Yes |
Tab settings |
Yes |
Yes |
Record type assignments |
Yes |
Yes |
Page layout assignments |
Yes |
No |
Object permissions |
Yes |
Yes |
Field permissions |
Yes |
Yes |
User permissions (app and system) |
Yes |
Yes |
Apex class access |
Yes |
Yes |
Visualforce page access |
Yes |
Yes |
External data source access |
Yes |
Yes |
Service provider access |
Yes |
Yes |
Custom permissions |
Yes |
Yes |
Desktop client access |
Yes |
No |
Login hours |
Yes |
No |
Login IP ranges |
Yes |
No |