sf-permissions

You can visualize Salesforce Permission Set Group hierarchies by rendering them as ASCII trees and Mermaid diagrams. This reveals how access is granted across users and orgs, helping administrators enforce least privilege.

To check Apex access in Salesforce Permission Sets, you can detect and enumerate which specific sets grant permissions. The analysis covers Apex, Visualforce, Flow, Custom Permission, object, field, and system permissions.

Yes, you can compare Salesforce user permissions across different orgs. The modular Python scripts support end-to-end comparison workflows, allowing you to analyze user permissions and export configurations to identify discrepancies.

Yes, this Salesforce permission auditing tool requires the simple-salesforce Python library to interact with your org. It also uses the rich library to format outputs and render visualizations directly in your CLI.

The best way to audit Salesforce Permission Set assignments is to generate a comprehensive org permission overview. This identifies exactly who has specific permissions, satisfying compliance requirements and maintaining least privilege.

Yes, you can export Salesforce Permission Set configurations for offline analysis. The CLI and modular Python scripts support exporting PS configurations, enabling targeted access detections and end-to-end permission reviews.