[{"data":1,"prerenderedAt":252},["ShallowReactive",2],{"navigation":3,"page-\u002Fen\u002Fsetup\u002Flicenses-and-permission-sets":88,"\u002Fen\u002Fsetup\u002Flicenses-and-permission-sets-surround":246,"comments-\u002Fen\u002Fsetup\u002Flicenses-and-permission-sets":251},[4],{"title":5,"path":6,"stem":7,"children":8,"page":87},"En","\u002Fen","en",[9,53],{"title":10,"path":11,"stem":12,"children":13,"icon":52},"CRM Analytics Foundations","\u002Fen\u002Ffoundations","en\u002F1.foundations\u002F1.index",[14,16,20,24,28,32,36,40,44,48],{"title":15,"path":11,"stem":12},"Welcome & Dev Org",{"title":17,"path":18,"stem":19},"Graded Quiz","\u002Fen\u002Ffoundations\u002Fquiz","en\u002F1.foundations\u002F10.quiz",{"title":21,"path":22,"stem":23},"What Is CRM Analytics?","\u002Fen\u002Ffoundations\u002Fwhat-is-crm-analytics","en\u002F1.foundations\u002F2.what-is-crm-analytics",{"title":25,"path":26,"stem":27},"Architecture","\u002Fen\u002Ffoundations\u002Farchitecture-and-data-flow","en\u002F1.foundations\u002F3.architecture-and-data-flow",{"title":29,"path":30,"stem":31},"The Data Layer","\u002Fen\u002Ffoundations\u002Fthe-data-layer","en\u002F1.foundations\u002F4.the-data-layer",{"title":33,"path":34,"stem":35},"The Design Layer","\u002Fen\u002Ffoundations\u002Fthe-design-layer","en\u002F1.foundations\u002F5.the-design-layer",{"title":37,"path":38,"stem":39},"The Intelligence Layer","\u002Fen\u002Ffoundations\u002Fthe-intelligence-layer","en\u002F1.foundations\u002F6.the-intelligence-layer",{"title":41,"path":42,"stem":43},"Hands-On Tour","\u002Fen\u002Ffoundations\u002Fhands-on-tour","en\u002F1.foundations\u002F7.hands-on-tour",{"title":45,"path":46,"stem":47},"Six Adoption Steps","\u002Fen\u002Ffoundations\u002Fsix-steps-and-interview-prep","en\u002F1.foundations\u002F8.six-steps-and-interview-prep",{"title":49,"path":50,"stem":51},"Interview Questions","\u002Fen\u002Ffoundations\u002Finterview-questions","en\u002F1.foundations\u002F9.interview-questions","i-lucide-compass",{"title":54,"path":55,"stem":56,"children":57,"icon":86},"Setup & User Provisioning","\u002Fen\u002Fsetup","en\u002F2.setup\u002F1.index",[58,60,64,68,72,76,80,83],{"title":59,"path":55,"stem":56},"Provisioning Users",{"title":61,"path":62,"stem":63},"Licenses & Permissions","\u002Fen\u002Fsetup\u002Flicenses-and-permission-sets","en\u002F2.setup\u002F2.licenses-and-permission-sets",{"title":65,"path":66,"stem":67},"Integration User","\u002Fen\u002Fsetup\u002Fthe-integration-user","en\u002F2.setup\u002F3.the-integration-user",{"title":69,"path":70,"stem":71},"Security User","\u002Fen\u002Fsetup\u002Fthe-security-user","en\u002F2.setup\u002F4.the-security-user",{"title":73,"path":74,"stem":75},"Analytics Settings","\u002Fen\u002Fsetup\u002Fanalytics-settings","en\u002F2.setup\u002F5.analytics-settings",{"title":77,"path":78,"stem":79},"Hands-On Access","\u002Fen\u002Fsetup\u002Fhands-on-assigning-access","en\u002F2.setup\u002F6.hands-on-assigning-access",{"title":17,"path":81,"stem":82},"\u002Fen\u002Fsetup\u002Fquiz","en\u002F2.setup\u002F7.quiz",{"title":49,"path":84,"stem":85},"\u002Fen\u002Fsetup\u002Finterview-questions","en\u002F2.setup\u002F8.interview-questions","i-lucide-settings-2",false,{"id":89,"title":90,"access":91,"body":92,"description":236,"extension":237,"interview":91,"links":91,"meta":238,"navigation":239,"passScore":91,"path":62,"quiz":91,"seo":240,"stem":63,"video":241,"__hash__":245},"docs\u002Fen\u002F2.setup\u002F2.licenses-and-permission-sets.md","CRM Analytics Licenses & Permission Sets Explained",null,{"type":93,"value":94,"toc":228},"minimark",[95,100,113,118,128,139,146,150,161,164,174,181,186,190,216,223],[96,97,99],"h1",{"id":98},"licenses-permission-sets","Licenses & Permission Sets",[101,102,103,104,108,109,112],"p",{},"To turn a Salesforce user into a CRM Analytics user you grant two different things, and beginners constantly mix them up. This lesson pins down the difference between a ",[105,106,107],"strong",{},"permission-set license"," and a ",[105,110,111],{},"permission set",", then shows how permission sets let you scope access from all-powerful admin down to a single capability.",[114,115,117],"h2",{"id":116},"the-license-a-permission-set-license-psl","The license: a permission-set license (PSL)",[101,119,120,121,124,125,127],{},"The ",[105,122,123],{},"CRM Analytics Plus"," entitlement is delivered as a ",[105,126,107],{},", or PSL. A PSL is not the same as a user's profile license — it is an add-on you assign directly on the user record that says, in effect, \"this person is entitled to CRM Analytics.\"",[129,130,132],"note",{"icon":131},"i-lucide-info",[101,133,134,135,138],{},"The PSL is the seat you paid for. Assigning it does ",[105,136,137],{},"not"," by itself grant any specific ability — it only unlocks the right to be granted those abilities through a permission set. License first, capabilities second.",[101,140,141,142,145],{},"Alongside the core CRM Analytics Plus PSL you may see ",[105,143,144],{},"related, app-specific licenses"," — for example entitlements tied to prebuilt analytics apps such as Sales Analytics or Service Analytics. These sit next to the main license and enable the templated app content, but the pattern is the same: a license entitles, a permission set authorizes.",[114,147,149],{"id":148},"the-permission-set-what-actually-grants-access","The permission set: what actually grants access",[101,151,152,153,156,157,160],{},"Once the license is in place, one or more ",[105,154,155],{},"permission sets"," do the real work of authorizing what the user can do. Salesforce ships a set of analytics ",[105,158,159],{},"System Permissions",", and you switch them on by including them in a permission set and assigning that set to the user.",[101,162,163],{},"At the top of the pile sits one all-powerful permission:",[165,166,168],"tip",{"icon":167},"i-lucide-crown",[101,169,170,173],{},[105,171,172],{},"Manage Analytics"," is the master key. A user with Manage Analytics can do essentially everything in CRM Analytics — create and edit apps, dashboards, datasets, connections, and dataflows, and manage other users' assets. Reserve it for administrators and platform owners, not everyday users.",[101,175,176,177,180],{},"For everyone else, you compose ",[105,178,179],{},"scoped permission sets"," that switch on only the capabilities a role actually needs. A few common building blocks:",[182,183],"lesson-cards",{":columns":184,":items":185},"2","[{\"title\":\"Use Analytics\",\"icon\":\"i-lucide-eye\",\"description\":\"The baseline permission to open the Studio and view analytics assets shared with the user.\"},{\"title\":\"Create and edit dashboards\",\"icon\":\"i-lucide-layout-dashboard\",\"description\":\"Lets a user build and modify dashboards and lenses, without granting data-engineering rights.\"},{\"title\":\"Create apps\",\"icon\":\"i-lucide-folder-plus\",\"description\":\"Allows the user to create apps (folders) to organize and share their own analytics content.\"},{\"title\":\"Download data\",\"icon\":\"i-lucide-download\",\"description\":\"Permits exporting query results and dashboard data to CSV or Excel — often restricted for governance.\"}]",[114,187,189],{"id":188},"composing-the-right-access","Composing the right access",[101,191,192,193,196,197,200,201,204,205,208,209,211,212,215],{},"Because permissions are granular, you can tailor access precisely. A dashboard builder might get ",[105,194,195],{},"Use Analytics",", ",[105,198,199],{},"Create and edit dashboards",", and ",[105,202,203],{},"Create apps"," — but ",[206,207,137],"em",{}," the ability to add data connections or edit dataflows. A pure viewer might get only ",[105,210,195],{}," and nothing else. An analyst who needs to pull data out might additionally get ",[105,213,214],{},"Download data",".",[101,217,218,219,222],{},"The best practice is ",[105,220,221],{},"least privilege",": start from what the role truly needs and add only those permissions, rather than handing out Manage Analytics to avoid thinking about it. You will build exactly this kind of scoped permission set by hand in the hands-on lesson later in this section.",[101,224,225,226,215],{},"Next up: two special, behind-the-scenes users that CRM Analytics relies on — starting with the ",[105,227,65],{},{"title":229,"searchDepth":230,"depth":231,"links":232},"",1,2,[233,234,235],{"id":116,"depth":231,"text":117},{"id":148,"depth":231,"text":149},{"id":188,"depth":231,"text":189},"Understand the CRM Analytics Plus permission-set license versus permission sets, and how Manage Analytics and scoped permission sets grant the right access to each user.","md",{},{"title":61},{"title":90,"description":236},{"id":242,"start":243,"end":244},"0UrasqsdHXU",82,124,"inocGM7cJjlTJ7ea41HgcC3xjdI2U70xuis_cMswpNA",[247,249],{"title":59,"path":55,"stem":56,"description":248,"children":-1},"Setup is the admin's first job in CRM Analytics: make each person a Salesforce user, then assign the permission-set license and permission set that unlock analytics.",{"title":65,"path":66,"stem":67,"description":250,"children":-1},"Meet the Analytics Integration User: how it reads Salesforce data into datasets, why custom objects need explicit access, and how its locale sets the language of data values.",[],1783463455457]