Difference between Roles and Profiles

Difference between Roles and Profiles

The way I normally explain this is that the Role determines what is visible to the user and the Profile determines what actions they are allowed to perform.

Profile – gives combination of access control and permission to users.

Permission set  -It enhances functionality of profiles.

Imagine a scenario where only one user needs access to "Account " object and he belong to some 'Any XYZ' profile. then we need to modify that profile which will effect other users with the same profile.(one profile have many users  )

so alternatively we can create a permission set with access to "Account“ object and assign that to that particular user.

Assigned Apps

Settings that specify which apps are visible in the app menu

Assigned Connected Apps

Settings that specify which connected apps are visible in the app menu

Object Settings

Permissions to access objects and fields, and settings such as tab availability

App Permissions

Permissions to perform app-specific actions, such as "Manage Call Centers"

Apex Class Access

Permissions to execute Apex classes

Visualforce Page Access

Permissions to execute Visualforce pages

System Permissions

Permissions to perform actions that apply across apps, such as "Modify All Data"