sf-permissions

Audit Salesforce permissions by analyzing Permission Sets and Permission Set Groups to detect access across objects, fields, Apex, Visualforce, Flow, and custom permissions. The tool identifies who has access to specific resources and exports results to CSV or JSON for governance.

Visualize Salesforce Permission Set Group hierarchy to reveal structural relationships and ownership. The tool maps nested permission configurations across one or more orgs, making it easier to enforce least privilege and identify poorly understood access risks.

Yes, you need the sf CLI for authentication and the simple-salesforce Python dependency to query the API. Authenticate with the sf CLI first, then run the Python-based CLI to analyze a user's permissions, including group-backed assignments.

Export Salesforce permission analysis to CSV or JSON formats for compliance documentation. The tool performs metadata reviews and user permission analysis, listing all assignments including group-backed permissions, then writes results to structured files for governance records.

Salesforce permission detection for Apex, Visualforce, and Flow access works by querying the Salesforce API to analyze Permission Sets and Permission Set Groups. The Python CLI inspects these configurations to pinpoint exactly which users have execution access.

Auditing custom permissions across multiple Salesforce orgs requires proper API authentication for each environment. The tool safely detects access by analyzing Permission Sets and Permission Set Groups while safeguarding sensitive operations during the cross-org export process.