Assign Permission Set

Assign Service Assurance Hub Permission Set

The Service Assurance Hub includes pre-configured permission sets to control access to the managed package features. This guide walks you through assigning the Service Assurance Hub Admin permission set to users and creating custom permission sets for end users with reduced privileges.

Overview: Assign admin permissions to configuration users, then clone and customize permissions for standard end users to enforce the principle of least privilege.

Permission Set Hierarchy

The Service Assurance Hub includes two primary permission sets:

Best Practice: Follow the principle of least privilege by assigning only the permissions each user role requires.

Step 1: Access Permission Sets

Navigate to Salesforce Setup to locate the Service Assurance Hub permission sets:

1. Click the Setup icon in the top-right corner
2. In the Quick Find box, search for Permission Set
3. A list of all available permission sets will appear

Locate the Service Assurance Hub permission sets:

1. Look for 'Service Assurance Hub Admin' in the permission set list
2. This is the primary admin permission set created by the managed package

The Service Assurance Hub Admin permission set listed in Permission Sets

Step 2: Assign Admin Permissions

Assign the Service Assurance Hub Admin permission set to users who will manage, configure, and administer the Service Assurance Hub in your organization.

To assign the permission set:

1. Click on the 'Service Assurance Hub Admin' permission set name
2. Click the Manage Assignments button
3. Click Add Assignments
4. Select the System Administrators and configuration users who need full access
5. Click Assign to confirm

Manage Assignments interface for assigning permissions to admin users

Who Should Receive Admin Permissions:

1. System administrators managing Salesforce configuration
2. Implementation consultants setting up the Service Assurance Hub
3. Power users who configure dashboards and reports

Step 3: Create Custom User Permission Set

For end users who should access the Service Assurance Hub but do not need full admin capabilities, clone the admin permission set and remove unnecessary permissions.

To clone the permission set:

1. Open the 'Service Assurance Hub Admin' permission set
2. Click the Clone button
3. Enter a new name for the cloned permission set (e.g., 'Service Assurance Hub User')
4. Click Save

Now customize the cloned permission set:

1. Review the cloned permission set's permissions
2. Remove or disable permissions that end users should not have:
3. Setup and configuration object permissions
4. Delete or modify permissions on critical objects
5. Dashboard and report creation/modification permissions

Configuration Recommendation: Disable create/edit/delete permissions on system-critical objects and retain only read and view permissions for end users.

Permissions to Consider for End Users:

Step 4: Assign User Permission Sets

Once your custom user permission set is configured, assign it to end users who should have limited Service Assurance Hub access.

1. Open the 'Service Assurance Hub User' (or your custom name) permission set
2. Click Manage Assignments
3. Click Add Assignments
4. Select end users who need access to the Service Assurance Hub
5. Click Assign

Who Should Receive User Permissions:

1. Service delivery team members
2. Analysts viewing reports and dashboards
3. Team leads monitoring service metrics

Verification Checklist

Verify that permissions have been properly configured before going live:

1. ☐ Admin users can access all Service Assurance Hub features and configuration
2. ☐ End users can view records and run reports
3. ☐ End users cannot delete records or modify configuration
4. ☐ Test user access by logging in as different user types
5. ☐ Verify all necessary users have been assigned appropriate permission sets

✓ Permission configuration is complete
Your Service Assurance Hub permission sets are now assigned and configured to enforce proper access controls across your organization.

Troubleshooting

If users report access issues or missing features:

1. User cannot see Service Assurance Hub app: Verify the user's profile has access to the Service Assurance Hub app in the mobile navigation settings
2. Permission denied on specific objects: Check if the permission set includes the required object-level and field-level permissions
3. Users missing expected features: Confirm the user has the correct permission set assigned and check for organization-wide defaults that may restrict access

For additional support, contact the CodeyLabs support team at support@codeylabs.com.