Salesforce Profiles, Permission Sets and Sharing Review (Defensive)
Check who can see and change what.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it.
Review access in our Salesforce org as a defensive review of my own org. Profiles and permission sets with their key permissions: [PERMISSIONS]. Number of users per profile: [USER_COUNTS]. Sharing model for key objects: [SHARING_MODEL]. Sensitive data (personal, financial): [SENSITIVE_DATA]. Our policy: [POLICY]. Look for users with broad permissions such as view all data, modify all data, export reports, delete or manage users; profiles with many users and many permissions; inactive users holding licences; users who have changed role; and sensitive fields visible to everyone. Rate each by risk and effort and recommend least privilege and review, not workarounds. Base findings on the lists and ask for missing information; do not ask me to paste personal data. Return a table, a proposed set of permission sets by role, a joiner, mover and leaver checklist, and a quarterly review routine. Mark every setting name [VERIFY] and state that the administrator must test changes in a sandbox.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.