Skip to main content
SFDC Developers

Permission Comparator

Compare any two Salesforce Profiles or Permission Sets side-by-side. Instantly see differences in object CRUD, field-level security, system permissions, Apex class access, and more — all fetched live from your org and compared in your browser.

Connect Your Salesforce Org

Connect to your org via OAuth to fetch Permission Sets and Profiles for comparison. Only API-scope access is requested — no data is modified or stored.

Frequently Asked Questions

How do I compare two Permission Sets in Salesforce?

Connect your Salesforce org using the OAuth buttons above. The tool fetches all Permission Sets and Profiles from your org. Select one on the left and one on the right, then click Compare Selected. The tool fetches object permissions, field-level security, system permissions, and setup entity access for both and shows a color-coded side-by-side diff. Yellow rows indicate differences, blue rows are left-only, and green rows are right-only.

Can I compare a Profile with a Permission Set?

Yes. Internally, Salesforce stores Profiles as Permission Set records with the IsOwnedByProfile flag set to true. This tool lists both Profiles and Permission Sets in the selector, grouped into separate sections. You can compare any combination — Profile vs Profile, Permission Set vs Permission Set, or Profile vs Permission Set.

What permissions are compared?

The tool compares six categories: Object Permissions (Create, Read, Edit, Delete, View All Records, Modify All Records), Field-Level Security (Read and Edit per field per object), System/User Permissions (like API Enabled, Modify All Data, View Setup), Apex Class Access, Visualforce Page Access, and Custom Permissions. Use the category tabs and filters to focus on what matters.

Can I export the comparison results?

Yes. Click the Export CSV button to download the full comparison as a CSV file. Each row includes the category, item name, object (for field-level security), permission type, left and right values, and the diff status. This is useful for security audits, compliance reviews, user access reviews, and change documentation.

Is my org data safe?

Yes. The tool only reads permission metadata via the Salesforce REST API — it never modifies permissions, profiles, or any org configuration. All comparison logic runs entirely in your browser. Your OAuth token is stored in session storage and is automatically cleared when you close the tab or disconnect.

Related Salesforce Developer Tools

  • Schema ERD Viewer

    Visualize the object relationships behind your permission assignments — see which objects are connected and how.

  • SOQL Query Builder

    Build SOQL queries visually to investigate permission assignments, profile memberships, and user access.

  • Apex Debug Log Analyzer

    Debug access issues by analyzing Apex logs — see which CRUD checks pass or fail in your code.

Trending Now