forcedotcom avatar

Platform Permission Set Generate

Generates Salesforce permission set XML with proper object CRUD, field-level security, user permissions, and tab visibility. The real value is in the guardrails: it won't let you add required fields to fieldPermissions (a common deployment killer), handles the annoying tab naming conventions (custom object tabs need __c suffixes, standard ones need the standard- prefix), and structures the metadata correctly for API v60.0+. If you've ever had a permission set fail deployment because you accidentally included a master-detail field or botched the XML structure, this keeps you from making those mistakes again.

skills.sh installs
6.8K
GitHub stars
1.2K
last updated
Aug 21, 2026

Install

$ npx -y skills add forcedotcom/sf-skills --skill platform-permission-set-generate --agent claude-code

Installs into .claude/skills of the current project.

Files

When to Use This Skill

Use when generating or editing permission set metadata, or when granting object, field, user, and app permissions.

Step 1: Define Core Properties

Start by defining the required permission set properties:

<PermissionSet xmlns="http://soap.sforce.com/2006/04/metadata">
    <fullName>YourPermissionSetName</fullName>
    <label>Display Name for Administrators</label>
    <description>Clear description of purpose and intended audience</description>
</PermissionSet>

Naming conventions:

  • Use descriptive API names (e.g., Sales_Manager_Access)

Step 2: Configure Object Permissions

Add CRUD permissions for standard and custom objects:

<objectPermissions>
    <allowCreate>true</allowCreate>
    <allowRead>true</allowRead>
    <allowEdit>true</allowEdit>
    <allowDelete>false</allowDelete>
    <modifyAllRecords>false</modifyAllRecords>
    <viewAllRecords>false</viewAllRecords>
    <viewAllFields>false</viewAllFields>
    <object>Account</object>
</objectPermissions>

Step 3: Set Field-Level Security

Define field permissions for sensitive or custom fields:

Sponsors

Details

Repository
github.com/forcedotcom/sf-skills
Categories
Security, Sales & Marketing
First seen
Jul 14, 2026

More from forcedotcom/sf-skills

All 158

Recommended

More Security
1aws avatarlaunching-ec2-instance-with-best-practicesaws/agent-toolkit-for-awsLaunches an EC2 instance with secure, cost-efficient defaults including AMI selection, burstable instance sizing, least-privilege IAM roles, hardened security g6.8Kskills.sh installs
2forcedotcom avatardx-code-analyzer-runforcedotcom/sf-skillsRun Salesforce Code Analyzer to scan code for security, performance, best practice, and code style violations. Supports all engines (PMD, ESLint, CPD, RetireJS,6.7Kskills.sh installs
3aws avatarcreating-production-vpc-multi-azaws/agent-toolkit-for-awsCreates a production-ready VPC with public and private subnets across multiple Availability Zones, including internet gateway, NAT gateways, route tables, and s6.6Kskills.sh installs
4aws avatarconnecting-vpcs-with-peeringaws/agent-toolkit-for-awsEstablishes VPC peering connections between two VPCs for direct private network connectivity. Always use this skill when creating or managing VPC peering — it v6.5Kskills.sh installs
5aws avatarenabling-lambda-vpc-internet-accessaws/agent-toolkit-for-awsEnables internet access for AWS Lambda functions deployed in VPC subnets by creating NAT Gateway infrastructure, configuring public/private subnet routing, and 6.5Kskills.sh installs
6aws avatarexporting-rds-to-s3aws/agent-toolkit-for-awsExports Amazon RDS or Aurora database snapshots to Amazon S3 in Apache Parquet format for analytics, backup, or data migration. Handles snapshot selection or cr6.5Kskills.sh installs