Generally, permissions and system access settings can be specified for users at the profile level and at an individual user permission set level, although certain permissions and access settings can only be specified in profiles. A summary of the permission and settings types that are available in profiles and permission sets can be seen in the following table:
Permission/Setting Type |
Available in profiles |
Available in permission sets |
Assigned apps |
Yes |
Yes |
Tab settings |
Yes |
Yes |
Record type assignments |
Yes |
Yes |
Page layout assignments |
Yes |
No |
Object permissions |
Yes |
Yes |
Field permissions |
Yes |
Yes |
User permissions (app and system) |
Yes |
Yes |
Apex class access |
Yes |
Yes |
Visualforce page access |
Yes |
Yes |
External data source access |
Yes |
Yes |
Service provider access |
Yes... |