permission-model

Design Salesforce permission models governing users, records, and Apex sharing.

2|Updated Mar 18, 2026

Search Tags:#security #permissions #sharing #salesforce #apex #custom-permissions #owd

Ready to run

npx skills add https://github.com/bhanu91221/claude-sfdx-iq --skill permission-model

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: permission-model
Source: https://github.com/bhanu91221/claude-sfdx-iq/tree/main/skills/permission-model
Command: npx skills add https://github.com/bhanu91221/claude-sfdx-iq --skill permission-model

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Salesforce permission management is complex, requiring consistent, auditable controls across users, roles, and data access to prevent misconfigurations and security gaps.

Core Features & Use Cases

Centralize control over object, field, and Apex-level access through Permission Sets, Permission Set Groups, and Custom Permissions.
Define OWD design and sharing rules (ownership-based, criteria-based, and Apex managed sharing) to enforce least privilege while enabling collaboration.
Support governance tasks such as muting permissions, role hierarchies, and automated validations in Apex to ensure secure deployments.

Quick Start

Configure a baseline security model by declaring permission sets, groups, and custom permissions for your Salesforce org, and begin applying Apex-managed sharing patterns.

Frequently Asked Questions about permission-model

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I design a Salesforce permission model for organization-wide security?▼

Designing a Salesforce permission model involves declaring permission sets, permission set groups, and custom permissions to govern access. You define organization-wide defaults (OWD), sharing rules, and Apex managed sharing patterns to enforce least privilege while enabling collaboration.

What is the best way to manage custom permissions and permission set groups in Salesforce?▼

The best way to manage custom permissions and permission set groups is by centralizing control over object, field, and Apex-level access. You configure muting permissions to subtract unwanted access and group permission sets to package access logically for different user roles.

When do I need Apex managed sharing instead of standard Salesforce sharing rules?▼

You need Apex managed sharing when standard ownership-based and criteria-based sharing rules cannot meet complex access requirements. It enables programmatic sharing across users and records to handle functional requirements that declarative sharing rules cannot support.

Can I use permission set muting to enforce least privilege in Salesforce?▼

Yes, you can use permission set muting within permission set groups to enforce least privilege. Muting behavior subtracts specific permissions from a group, allowing you to remove unnecessary object, field, or Apex access while maintaining a scalable security model.

How do I configure OWD and sharing rules for a Salesforce security review?▼

Configuring OWD and sharing rules for a Salesforce security review requires defining baseline access restrictions and layering ownership-based, criteria-based, and Apex managed sharing. This ensures auditable controls and prevents misconfigurations across user roles and records.

Does this Salesforce permission approach support automated deployment workflows?▼

Yes, this permission approach supports automated deployment workflows by applying Apex-managed sharing patterns and validating permissions programmatically. It meets governance tasks through automated validations in Apex, ensuring secure and auditable deployments across environments.