Permission Set Vs Profiles:
- Permissions and access settings are specified in user profiles and permission sets.
- Every user is assigned only one profile, but can also have multiple permission sets.
- Example: you can create a permission set that gives read access to a custom object and assign it to a large group of users, and create another permission set that gives edit access to the object and assign it to only a few users. You can assign these permission sets to various types of users, regardless of their profiles.
| Permission or Setting Type | In Profiles? | In Permission Sets? |
|---|---|---|
| Assigned apps |  | |
| Tab settings | | |
| Record type assignments | | |
| Page layout assignments | | |
| Object permissions | | |
| Field permissions | | |
| User permissions (app and system) | | |
| Apex class access | | |
| Visualforce page access | | |
| Service provider access (if Salesforce is enabled as an identity provider) | | |
| Desktop client access | | |
| Login hours | | |
| Login IP ranges | | |
| Click Here |
