Free Tool — No Signup Required

Salesforce Permission Set & Profile Auditor

Paste Profile or PermissionSet metadata XML (multiple supported), or upload .profile-meta.xml / .permissionset-meta.xml files. Instantly surface over-privileged access, admin cloning, stale permsets, FLS exposure, and license waste — all in your browser.

🔒 All analysis runs client-side. Your permission metadata never reaches a server.
Consultant access required. Sign in with the verified owner account to run this audit. Consultant sign in →
Paste your Profile or PermissionSet XML
Retrieve from SFDX: sf project retrieve start -m Profile,PermissionSet then paste. Multiple files supported — concatenate them.

Paste one or multiple .profile-meta.xml / .permissionset-meta.xml files — the auditor detects file boundaries automatically.

🔐

Drop your Profile & PermissionSet files here

Retrieve from SFDX: sf project retrieve start -m Profile,PermissionSet

.profile-meta.xml .permissionset-meta.xml Multiple files OK
Each file is one Profile or PermissionSet. Drop multiple to audit your full permission landscape.

Auditing your permissions…

Running all risk checks. Usually takes under a second.

Parsing Profile & PermissionSet metadata
Scanning for admin cloning smells and over-privilege
Checking FLS exposure and sharing risks
Detecting stale and unused permission sets
Auditing license waste and naming quality
🔐 Permission Audit
Permission Bloat Report
0 entities
–
/100
–
–
Over-Privileged–
Admin Cloning–
Sharing & FLS–
Stale / License–
Naming Quality–
🧬 Admin Cloning Smells
–
🚨 Over-Privileged Access
–
🕳 Unused / Stale Permissions
–
🔓 Sharing & FLS Exposure
–
💸 License Waste
–
📝 Naming & Documentation
–

📋 Share with your team

Copy a plain-text executive summary to paste into Slack, Jira, or your next sprint review. Or download a formatted PDF to share with stakeholders and auditors.

Want an expert to interpret these findings?

Get a Salesforce Org Risk Snapshot

Request a fixed-scope 8–12 page assessment with the top 10 issues, severity, business impact, recommendations, and effort estimates. Final scope and payment are confirmed after intake.

✓ Top 10 issues prioritized by severity
✓ Business impact and recommendations
✓ Effort estimates for next-step planning
✓ Provisional test price: $495–$750
Want an expert to interpret these findings? Get a Salesforce Org Assessment →

🔗 Permissions control what users can do — sharing rules control what records they can see.

→ Audit your Sharing Rules at /sharing

Further Reading

→ Salesforce Admin Debt: 7 Signs Your Org Needs an Audit