User permissions and access settings are specified in profiles and permission sets. Every user is assigned only one profile, but can also have multiple permission sets. When determining access for your users, useprofiles to assign the minimum permissions and access settingsfor specific groups of users. Then usepermission sets to grant more permissionsas needed.