Apply user access policies to declaratively grant or remove access to managed package licenses, permission set licenses, permission sets, permission set groups, queues, and groups. Use entitlement-based or user attribute-based criteria to identify users as you build your policies. Automatically apply access when users are created, updated, or both.
Where: This change applies to Lightning Experience and Salesforce Classic in Enterprise and Unlimited editions.
Why: For example, you’re migrating a group of users from a profile to permission sets and permission set groups. Create filters to identify the users assigned to the profile. Create actions in the user access policy to add access to the appropriate permission sets and permission set groups. Add an action to assign the users to a minimum access profile and remove access to the current profile.
How: For access to the User Access Policies (beta), fill out this form.
Apply and Automate Mass Access with User Access Policies (Beta) (salesforce.com)