An org with 600+ users, 500+ roles and 70 profiles. my job is clean up the role and profile in system manner. to be specific, I need to analyze each profile and role to understand and compare similar profiles, find the differences. In order to combine roles and reduce number of profiles. or introduce permission set if necessary.
I have exported all the roles and profiles comparing using excel. but it's almost impossible to do as there are so many columns. even break down to groups does not help much.
my question is: can anyone give me some advise on what approach is efficient and proper to find out all the differences between two profiles? (down to fields on each object)
Best Answer
The Salesforce PermComparator might be the exact tool you need. You can enter in a user, profile, or permission set and compare it to any other.
Roles are a little bit more difficult, as they don't actually have any permissions directly associated with them, they just control sharing. You're going to need to evaluate the sharing criteria on every object that has an OWD of private to figure out exactly how your hierarchy is and is supposed to behave.