Tech Talk

User Access Policy can help the Salesforce Administrators to automate user access. With this mechanism, you can easily manage your users’ assignments to permission set licenses, permission sets, permission set groups, package licenses, queues, and groups in a single operation. Create policies that grant or remove access whenever your users are created or updated, or in a one-time manual migration. Streamline your user access and save time with User Access Policy.

Following things can be automatically assigned/revoke to a user during creation/update using Salesforce User Access Policy

1. Permission sets
2. Permission set groups
3. Permission set licenses
4. Package licenses
5. Groups
6. Queues

Prerequisite to configure User Access Policy

Configuration steps

Step 1 – User Access policy creation.

1. In the Quick Find box, enter User Access Policies, and then select User Access Policies.
2. Click New User Access Policy.
3. Enter a value for the Policy Name and Description. The API Name auto-populates.
4. Click Save.
5. Then go to the Policy and click on “Edit”

Points to remember
Trigger Type – Either Create ,update and CreateAndUpdate ( So choose which way you want)
Status – Select the dropdown value as “Design” and after testing , then change the Status as “Active”
Activate User Policies can not be changed.

Step 2 – Add filter condition to find User

Select below conditions to filter out User records. There are two types of filter conditions

1. This filter is on below criteria
   1. Permission sets
   2. Permission set groups
   3. Permission set licenses
   4. Package licenses
   5. Groups
   6. Queues
   7. Profile
   8. Role
2. Any number of filters on standard and custom user fields of type Checkbox, Number, Picklist, or Text
3. Save the User Access Policy

Points to remember

• All the filter condition is in AND
• You can use up to three criteria for first section

Step 3 Test of Salesforce User Access Policy

1. Create or update user which are in the mentioned filtering criteria.
2. On the policy’s detail page under the Recent User Access Changes tab, you can monitor when this policy is applied and the affected users.