PermLens — Access Debugger for Salesforce

PermLens — Access Debugger for Salesforce Stop digging through Setup to figure out why a user has access. PermLens consolidates Profiles, Permission Sets, Permission Set Groups, Field-Level Security and record access into one clear, explainable panel — and shows you exactly WHERE each permission comes from. It runs entirely in your browser, using your own logged-in Salesforce session. No servers, no sign-up, nothing leaves your machine. WHAT PROBLEM IT SOLVES Every admin and consultant faces the same weekly question: "Why can this user see or edit this object, field or record — and what grants it?" Answering it by hand means opening a dozen Setup pages, cross-referencing permission sets, and still guessing which layer actually decided the outcome. Under the pressure of an audit ticket or a production access bug, a two-minute question becomes thirty minutes of hunting. PermLens gives you the answer in seconds. KEY FEATURES - Objects: effective CRUD (Read, Create, Edit, Delete, View All, Modify All) per object, with the exact Profile or Permission Set that grants each right. - Fields (FLS): a per-object field-level Read/Edit matrix, each cell traced back to its source. - System permissions: high-impact permissions (like Modify All Data) and where they come from. - Record access: open a record and see effective Read/Edit/Delete/Transfer, plus who else can access that specific record. - Compare two users side by side, with differences highlighted — perfect for "why does A see it but B doesn't?" - Export CSV of any grid, ready to attach to a ticket or an audit. HOW IT WORKS Open any Salesforce tab where you're logged in, click the PermLens icon, and the panel opens beside your org. Pick a user (or the record open in the tab) and PermLens builds the access picture instantly, explaining the origin of every permission. No configuration, no connected app, no admin setup required. PRIVACY & SECURITY (100% CLIENT-SIDE) PermLens does not collect, store or transmit any of your data. It uses your existing Salesforce session in the active tab to call only Salesforce's own REST/Tooling APIs, for your own org. All processing happens locally in your browser. There is no backend, no account and no analytics. Your credentials and data never leave your machine. Privacy policy: https://salesforce.flupdigital.com.br/permlens/privacy.html WHO IT'S FOR - Salesforce Administrators troubleshooting access and preparing audits. - Consultants and implementation partners who need to explain access fast across many orgs. - Developers and architects validating a security model before go-live. PRICE Free at launch. A future Pro version may add advanced features, but the core "where does this access come from" stays the focus. PERMISSIONS (why each is needed) - cookies: read the Salesforce session cookie in the active tab to authenticate API calls to your own org. - storage: save your preferences and a local usage counter on your device only. - activeTab / tabs / sidePanel: detect the Salesforce org in the active tab and open the side panel. - Salesforce host permissions: limited to Salesforce domains so the extension can call your org's APIs. NOTE PermLens is an independent tool and is not affiliated with, endorsed by or sponsored by Salesforce, Inc. "Salesforce" is a trademark of Salesforce, Inc.