Jim Nelson - 3 months ago
"Permission Set Assignment" object is not available in standard Reports and custom Report Types and that would be great to see in an upcoming release! I think the main complexity with it now is related to the mix of Profiles and Permission Set permissions in the same object.
I think we can utilize standard Reports only if we capture records from the standard "PermissionSetAssignment" object into a new custom one with a batch job, for example. It could refresh the data on a daily basis.
Another custom solution could look as a lightning app with a real time view of permission sets and users assignments: https://bit.ly/2ORsJH8
You can read more about it in this article: https://bit.ly/3hz8hqP
Swami Venkatramanan - 3 months ago
To address the use cases described in this idea and that of other ohana members, I have created a LWC component that is admin friendly. You can read about the same at: http://www.apexhours.com/user-360-the-missing-link/
Nancy Flores - 3 months ago
This would be SOOOO amazing to have. We create a very specific managed package that assigned perm sets to licences users. Running a report to ensure all licensed users have the perm set to access the app would be great considering the perm set allows acess to field sets that are specific to the package. Help a little QA Admin out!!!
Julie Gleason - 4 months ago
Our auditors need the ability to see who has the ability to provision user, for which we use permision sets. They do not accept a SOQL query or an export, because they view that as something that can be manipulated. The fact that we have no way to run a report that shows permission set assignments means that we have been asked to keep this in profiles, which is against all best practices recommended by Salesforce, because it creates unneccesary profiles.
Eric Rodriguez - 5 months ago
I do not comprehend how this is not available. There are permissions that cannot be set on standard profiles, so they have to be granted via permission sets. Yet, there is no way to report on those assignments through the UI? But, the checkboxes on FLS now have a blue background with the upcoming release. I understand that it is relatively easy to do a SOQL query via dev console on the permissionset and permissionsetassignment objects, but why can't an admin without SOQL knowledge generate the report quickly through the UI? Why can't I provide Info Security and auditors access to a prebuilt report with this information rather than having to build a customization or do it manually?
Anurag Srivastava - 5 months ago
It is much needed feature for Admin and developers.
Plz see below workaround to get list of Einstein Analytics users in org
We can get Einstein AnalyticsPermission set license details using below queries.
SELECT Id, Name, Username, Email,LastLoginDate,IsActive FROM User WHERE IsActive=true and Id IN (SELECT AssigneeId FROM PermissionSetLicenseAssign WHERE PermissionSetLicenseId = '0PL39000000TNp0')
e.g. '0PL39000000TNp0' is Analytics Platform permission set license id.
Getting the Users list on the basis of Permission Set details
SELECT Id, Name, Username, Email,LastLoginDate
WHERE IsActive=true and Id IN (
WHERE PermissionSet.Label = 'Wave Platform Viewer' Or PermissionSet.Label= 'Wave Admin'
SELECT DeveloperName,ExpirationDate,Id,MasterLabel,MaximumPermissionsAccessCMC,Status,TotalLicenses,UsedLicenses FROM PermissionSetLicense where MasterLabel='Analytics Platform'