Assign Salesforce permission sets to new users automatically

flowchart TD trig>"new salesforce user created"]:::trig s0["check user profile"]:::task s1["assign matching permission set"]:::task s2["user has correct access"]:::task trig --> s0 s1 --> s2 gx{"× does profile match a rule"}:::gate s0 --> gx p00["assign permission set"]:::task gx -->|"profile matches rule"| p00 p10["no action taken"]:::task gx -->|"no matching rule"| p10 p00 --> s1 p10 --> s1 out[/"new user granted correct access"/]:::out pay{{"no manual access setup needed"}}:::pay s2 --> out out --> pay classDef task fill:#e7f6fe,stroke:#34b8f0,color:#2c2a29 classDef svc fill:#f6f8fa,stroke:#7c8795,color:#2c2a29 classDef mi fill:#e7f6fe,stroke:#0079a8,color:#2c2a29,stroke-width:2px classDef human fill:#fff,stroke:#0079a8,color:#0079a8 classDef store fill:#f6f8fa,stroke:#0079a8,color:#2c2a29 classDef trig fill:#00a4eb,stroke:#0079a8,color:#fff,font-weight:bold classDef trigtime fill:#00a4eb,stroke:#0079a8,color:#fff,font-weight:bold classDef trigdata fill:#8ad4f5,stroke:#0079a8,color:#06314c,font-weight:bold classDef gate fill:#fff,stroke:#e8a23d,color:#6b4708,font-weight:bold classDef out fill:#1f9d6b,stroke:#167a53,color:#fff,font-weight:bold classDef pay fill:#06314c,stroke:#021f33,color:#fff