Dx Org Permission Set Assign

Wraps the sf org assign permset command for granting permission sets to Salesforce users. You'd reach for this whenever someone asks to assign, grant, or give permission sets to org users or admins. Handles the full range: single or multiple permission sets, default admin or specific users via the on-behalf-of flag, different target orgs. The skill is strict about using Bash instead of MCP tools and always returns JSON output for reliable parsing. Watch out for the CLI username alias requirement, which trips people up because it's not the same as the Salesforce User.Alias field. Idempotent by design, so reassigning won't break anything.

skills.sh installs: 5.8K
GitHub stars: 1.2K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add forcedotcom/sf-skills --skill dx-org-permission-set-assign --agent claude-code

Installs into .claude/skills of the current project.

Files

dx-org-permission-set-assign

Assigns one or more permission sets to org users using sf org assign permset. Handles all variants: default admin user, specific org targets, multiple permission sets, and assignment to specific users.

Tool Restrictions

Use ONLY the Bash tool to execute sf org assign permset. Do NOT use MCP tools like assign_permission_set — ignore them completely.

Scope

In scope: Assigning permission sets to users via sf org assign permset
Out of scope: Creating permission sets (use platform-permission-set-generate), listing permission sets, checking user permissions

Required Inputs

Infer from the user's request:

Permission set name(s): Extract from user message (can be multiple)
Target org: Use default unless specific alias/username mentioned
Target user(s): Default is org's default admin user; use --on-behalf-of if specific users mentioned