Step 2: Configure Permission Types
Now choose which types of permissions to include. You have fine-grained control over what ends up in the new permission sets.
The Permission Type Grid
The grid shows 13 cards, one per permission type. Each card has a checkbox and a short label.
All types are enabled by default. For most migrations, leave them all checked to get a complete copy of the profile's permissions.
What Each Type Covers
Quick reference for each type:
- Object Permissions -- CRUD access (Create, Read, Edit, Delete) plus View All and Modify All for each object
- Field Permissions -- Field-level security: which fields a user can read or edit on each object
- System/User Permissions -- Administrative permissions like "Manage Users," "View Setup," "API Enabled," and roughly 160 other system-level flags
- Tab Settings -- Controls which tabs appear as Default Visible, Available, or Hidden
- Apex Class Access -- Grants the ability to execute specific Apex classes
- Visualforce Page Access -- Grants the ability to view specific Visualforce pages
- Custom Permissions -- Custom permission flags that apps and automations check at runtime
- Record Type Visibilities -- Which record types are visible to users for each object
- Flow Access -- Ability to run specific flows (Screen Flows, Autolaunched Flows, Record-Triggered Flows)
- Custom Metadata Type Access -- Access to specific custom metadata types
- Custom Setting Access -- Access to specific custom settings
- External Data Source Access -- Access to external data sources configured in the org
- App Visibilities -- Which Lightning apps are visible to users
When to Uncheck a Type
Usually you'll leave everything selected. A few reasons you might not:
- You only need field-level security. Uncheck everything except Field Permissions.
- Phased rollout. Migrate object and field permissions first, then come back for system permissions and access types in a second pass.
- Another tool already handles it. If something else manages custom permissions or flow access in your org, skip those here.
tip
For a complete migration, leave all types selected. Only uncheck types you deliberately want to exclude.
Moving Forward
Click Next to preview exactly what the new permission set will contain.