Permission set groups for manufacturing job functions
Key Takeaway
Build one permission set group per job persona from reusable, task-based permission sets. To take a permission away from one persona, mute it in that persona's group. Users who get the same permission from another source still keep it.
A permission set group bundles several permission sets, so one assignment gives a user everything their job needs. In Agentforce Manufacturing, you combine permission sets, such as the ones for Rebate Management and Analytics for Manufacturing, into groups that match each job persona. Each role then gets the access it needs and nothing more. A shared permission set might grant something one persona shouldn't have. In that case, a muting permission set trims that persona's group and leaves the permission set unchanged.
What a permission set group is
Users assigned a permission set group get the combined permissions of every permission set in it, so you assign one group instead of assigning each permission set separately. A permission set group can include up to 100 permission sets.
Changes to a permission set flow to every permission set group that includes it, so one edit can change access for several personas at once. The group's status shows whether its combined permissions are up to date. After you add permission sets, the status changes to "Updated".