mshanemc/shane-sfdx-plugins

Convert Profile to Permissionset and remove rights from Profile - Profile still contains all rights

Closed this issue · 4 comments

I want to create an minimized Admin profile and put all field and object permissions in a permissionset.

After I clone the Admin profile (SystemAdminMinimum), pull the cloned profile into VS code, run sfdx shane:profile:convert -p SystemAdminMinimum -n PrfMinimumAdmin -e and push the minimized profile back to my scratch org, the profile still contains all field and object permissions on all objects. Am I doing something wrong?

  1. does the profile still have all the perms in local source?
  2. if you push to a new scratch org, does the profile still have all the perms?

thanks for the input, @bwong70! Learn something new all the time.

@stoevie so I guess it would it make sense to have the -e branch of this command remove those things from the profile if they exist already?

@mshanemc, sorry for my late response, I was on vacation.
Yes, It make sense to remove these permissions first.