Setting field-level security on permission sets instead of profiles is generally available, making it easier to follow the best practice of using permission sets for managing your users’ permissions. Delegated administrators can manage the assignment of permission set groups.
- Set Field-Level Security for a Field on Permission Sets Instead of Profiles (Generally Available)
When you create a field, set its field-level security on permission sets instead of profiles. Or, modify the field-level security for an existing field for all permission sets in Object Manager. This change makes it easier to follow the user access control best practice of using permission sets to manage your users’ permissions rather than profiles. This feature, now generally available, includes an enhancement so that you can see each permission set’s object permissions for the field’s object without leaving the page. - Allow Delegated Admins to Manage Permission Set Group Assignments
Delegated administrators can now manage the assignment of permission set groups for users in their delegated group, giving you more time for other admin tasks. - See More Information in Reports from the User Access and Permissions Assistant
Reports on users’ assigned permissions contain more details, such as the users’ titles, profiles, and whether they’re active. You can filter on some user attributes to report on a subset of users. It’s now easier to select the user, object, and field permissions that you’re reporting on. We also improved performance for these reports in Salesforce orgs with a large number of users. - Learn About Data Visibility and Access with Updated Who Sees What Videos
Set up your object, record, and field access to make sure that your users get access only to the data that they need—and no more. The refreshed Who Sees What video series reflects the latest best practices and incorporates more features, including permission set groups and restriction rules. - Automate and Migrate User Access with User Access Policies (Beta)
Automate your users’ assignments to managed package licenses, permission sets, and other access mechanisms based on criteria that you set. Create user access policies that automatically grant or remove access whenever users are created or updated. Or, easily migrate large sets of users to a new access setup in a single operation. Previously, Salesforce enabled user access policies, but you can now enable this beta feature on the User Management Settings Setup page. Also since the last release, you can now set more complex user criteria and monitor recent user access changes.