The Permission Set Assignment About to Expire That No One Noticed
- Architect
- 13 hours ago
- 2 min read
Temporary access is supposed to be temporary. A contractor gets a permission set with a 90-day expiration for a project, or a support rep gets elevated access for an incident and it's set to lapse automatically in a week. That's the right way to grant access — except nobody's watching the calendar, and Salesforce doesn't proactively tell you when one of these is about to run out. It just expires, sometimes in the middle of whatever the access was for.
A list, sorted by urgency
Expiring Permission Sets Assignments, part of Power User Toolkit, answers one question directly: what's about to expire, and how soon? It's the Salesforce permission set expiration report Setup doesn't give you natively.
Pick a window — today, tomorrow, three days, a week, ninety days, or a year — and the list shows every permission set assignment with an expiration date inside it, soonest first. Each row links straight into Setup to renew or revoke the assignment, so spotting the problem and fixing it happen in the same flow instead of two separate lookups.
Why this isn't just a filtered list view
You could try to build something similar with a report on PermissionSetAssignment, but expiration dates on permission sets aren't always straightforward to report on cleanly across your whole org in one place, and a report doesn't give you the quick day-range toggles or the direct link back into Setup. This tool is built specifically around the one question that matters — what's expiring soon — rather than being a general-purpose list you have to configure correctly every time.
Where this fits into a routine
The value here isn't a one-time check, it's a habit. A few minutes on the "1 Week" filter every Monday catches:
Contractor or vendor access that's about to lapse mid-project
Temporary elevated access from an incident that should have been revoked already, not left to expire on its own
Access grants tied to a specific initiative that wrapped up but the assignment didn't
None of this requires remembering which permission sets have expiration dates set in the first place — the tool surfaces all of them, across the whole org, in one place.
Common questions
Does this catch permanent (non-expiring) permission set assignments too?
No — it's scoped to assignments that have an expiration date set. Permanent assignments won't show up here, since there's nothing time-sensitive to flag.
Can I see everything expiring across the whole org, or just one permission set at a time?
The whole org at once. You're not picking a permission set first — the list spans every permission set with assignments expiring in your chosen window.
What happens when I click a row?
It links directly to that assignment's page in Setup, where you can extend, revoke, or review it — no separate navigation required.
For a full audit of what a permission set grants before you decide whether to extend it, see What Does This Permission Set Actually Grant? and Who Can Actually See That Field?. Or start at the Power User Toolkit overview.
Comments