Comparing Privilege Sets: Built-in vs. Custom

Beginner

A practical comparison of built-in privilege sets and when a custom set is the right choice.

What you'll learn

  • What [Full Access], [Data Entry Only], and [Read-Only Access] actually allow
  • Scenarios where each built-in set is appropriate
  • When a custom privilege set is necessary
  • The minimum viable custom privilege set

New developers often default to one of the three built-in privilege sets for convenience. Understanding what each actually allows -- and where they fall short -- helps you decide when to invest in a custom set.

1/4
1

[Full Access] -- developer only

[Full Access] allows everything: editing the schema, managing accounts, exporting data, running any script, modifying layouts. It is appropriate for developers and, with care, for a dedicated admin account. It should never be assigned to end users, service accounts for automated integrations, or anyone who should not be able to modify the solution.

Sign in to track your progress and pick up where you left off.

Sign in to FM Dojo