Admin Best Practices for User Management

Managing users is a core Salesforce Admin skill. One element of this skill is ensuring that each user has access to the right data so they can do their job. As admins, we also need to protect data that may be confidential, preventing users who don’t need to access that data from viewing, editing, or deleting it. That means we need to approach user management by applying the principle of least privilege: Only grant access to data that each user needs to do their job. This is why we use permission sets and profiles to control what data users can access across Salesforce.

Permission sets > profiles

When setting up your app, you should always start by granting your users a minimum access profile and layering permission sets on top of that based on their job function. Why? Because you can apply permission sets to all the users based on

Read the full article on the Salesforce Admins blog.