Permission Set Vs Profiles:
- Permissions and access settings are specified in user profiles and permission sets.
- Every user is assigned only one profile, but can also have multiple permission sets.
- Example: you can create a permission set that gives read access to a custom object and assign it to a large group of users, and create another permission set that gives edit access to the object and assign it to only a few users. You can assign these permission sets to various types of users, regardless of their profiles.
|Permission or Setting Type||In Profiles?||In Permission Sets?|
|Record type assignments|
|Page layout assignments|
|User permissions (app and system)|
|Apex class access|
|Visualforce page access|
|Service provider access (if Salesforce is enabled as an identity provider)|
|Desktop client access|
|Login IP ranges|