Salesforce Admin Profile and Permission Set

Profile

Profiles determine what objects and fields a user can access. A profile must be selected whether it is a Standard or Custom. Regardless of your org edition type, Standard profiles are always included in your org.

Things That A Profile Controls

• Field-level security
• Page Layout
• Record Type
• App

Standard Profiles

• System Administrator
• Standard Platform User
• Standard Platform One App User
• Standard User Salesforce API Only System Integrations
• Customer Community User
• Customer Community Plus User
• Partner Community User
• Partner User
• Solution Manager
• Marketing User
• Contract Manager
• Read Only
• Chatter Moderator User
• Minimum Access
• Salesforce
• Site.com Only User

Based on my experience, the profiles below are mostly used:

You need to select profiles according to the user's role. As you may know from your work experience, even employees in the same organization perform different tasks. Furthermore, even if they perform the same tasks, their assigned roles may vary, requiring different permissions. By default, the profiles set up in Salesforce cannot address these issues. So, how can you resolve this? The answer is Permission Sets.

 

Permission Sets 

Permission Sets are used to expand existing permissions. Firstly, both Profiles and Permission Sets contain a set of settings and permissions-defined information. However, Permission Sets play the role of providing an "extra boost" to the permissions already present in a Profile.

 

For example, let's say there are two employees, Employee A and Employee B, both with the Standard User Profile. However, Employee A needs permission to delete records for a specific object. In this case, you can create a Custom Permission Set that grants the delete permission for that object and assign it to Employee A. By doing so, you can resolve this issue by granting Employee A the necessary permission to delete records for that specific object, while still maintaining the Standard User Profile for both employees.

 

• Permission Sets do not grant or restrict additional permissions.
• You can assign multiple permission sets as needed.
• However, you cannot grant permissions that exceed the user's license.

Create and Assign Permission Sets 

Setup -> Permission Sets -> New

Assign Permission Sets

Select the Permission Sets you want to assign-> Manage Assignments

Select a user you want to assign to -> Next -> Assign

Manage A Specific User's Permission Sets

Setup -> User -> Select the user you target -> Go to Permission Set Assignments in the middle of the page -> You can check assigned Permission Sets.

 

 

Reference

https://www.salesforceben.com/salesforce-roles-profiles-permission-sets/

https://trailhead.salesforce.com/content/learn/modules/lex_implementation_user_setup_mgmt

https://help.salesforce.com/s/articleView?id=sf.admin_userprofiles.htm&type=5 

https://www.kicksaw.com/blog/salesforce-101-roles-vs-profiles