Permission Sets
Permission sets used by administrators, dashboard viewers, and protected link users
Overview
Role based permission sets ensure each user receives only the access they need. Administrators manage configuration, dashboard viewers can inspect analytics, and standard users can open protected link pages.
Who Needs This
| Permission Set | Use For | Typical Users |
|---|---|---|
ThreatProtectionAdmin | Full administration, installation, settings, license management, reporting, and maintenance | Salesforce administrators, security administrators, support leads |
ThreatProtectionDashboardViewer | Read only dashboard, analytics, reporting, and export access | Security analysts, managers, audit reviewers |
ThreatProtectionUser | Access to redirect and blocked pages used by protected links | All users who may click protected URLs |
Standard users do not need administrator access for background scanning. They do need ThreatProtectionUser if Click Protection is used, because protected links open Salesforce pages before a user is redirected or blocked.
Assigning During Installation
The Installation Assistant includes Assign User Permissions. This bulk assigns ThreatProtectionUser to active users who do not already have it.
Use the automatic assignment toggle if new and reactivated users should receive the permission set without manual work.
Manual Assignment
- Go to Setup → Permission Sets
- Open the permission set you want to assign
- Click Manage Assignments
- Add the required users
- Click Assign
Recommended Access Model
| User Type | Recommended Access |
|---|---|
| Product administrator | ThreatProtectionAdmin |
| Security or compliance viewer | ThreatProtectionDashboardViewer |
| Standard Salesforce user with Click Protection | ThreatProtectionUser |
| Standard Salesforce user without Click Protection | No bowbridge permission set is usually required |
Package Licenses
Permission sets and managed package licenses are separate. A user may need both, depending on what they do in the app. See License Assignment for package license management.