ClosePlan Permission Sets are added when a User is assigned a ClosePlan License.
ClosePlan utilizes 2 permission sets:
ClosePlan: Sales Cloud Aux
ClosePlan: Sales Cloud User
Both Permission Sets are managed and shipped with the app (ie: SalesCouldUser. permission set)
Provides Field Level Permissions (FLS) for ClosePlan Objects
Provides CRUD (Create, Read, Update, Delete) permissions for most ClosePlan Objects
Permission for objects with Master-Detail connection to standard SFDC objects like Opportunity, cannot be packaged (SFDC policy)
Auxiliary, created in Subscriber orgs by CP (ie: SalesCouldAux)
Provides CRUD permission for excluded objects in managed Permission Sets.
Provides FLS for fields created in the Subscriber Org (e.g.: Whitespace Custom Attributes)
Permissions are also divided per SFDC License:
As different Licenses provide access to different sets of objects (e.g.: Platform has only basic CRM objects, while Sales Cloud also has Opportunities.)
Sales Cloud - Permissions linked with Salesforce Sales Cloud License
Service Cloud - Permissions linked with Salesforce Service Cloud License
Platform - Permissions linked with Salesforce Platform License
Standalone Admin User permission set, which can be assigned to User’s with any SFDC License
ClosePlan User Management:
Correct permission sets are assigned to users automatically when a ClosePlan License is assigned
Automatically removed if license deactivated or user deactivated.
Finally:
ClosePlan Permission sets provide access to ClosePlan Objects only.
ClosePlan Permission sets do NOT provide access to Standard Objects (Account, Opportunity)
ClosePlan Admin Users require certain Salesforce permissions in order to do certain actions such as:
Manage users in CP Admin - requires at least Manage Permissions Sets permission
Create ClosePlan fields, Manage picklist values, etc - requires Customize App permission - aka System Admin profile.