Sandbox Support for Permission Sets
Friday, August 7, 2026
What it is
When you create a sandbox, your permission sets will soon copy over from production, each with its name, object-level scopes, and granular access logic across CRM, marketing, sales, commerce, service, automation, reporting, and account tools. This is in development for Enterprise tiers across Content, Sales, Service, Smart CRM, Revenue, Marketing, and Data Hub.
Why it matters
Permission sets define what each role can see and do, and without them in a sandbox, user acceptance testing cannot really start. You cannot assign a beta tester to the right permission set and validate the real end-user experience until you have rebuilt every access rule by hand, which is a lot of overhead repeated every time a sandbox is created. Copying permission sets in means a sandbox starts with the same access structure as production, so testing can begin right away. Worth tracking as it moves from in development toward release for anyone whose testing depends on accurate permissions.
The Take
Chris Carolan
Capability gets built because sandbox parity demands it, and then it lands for everybody.
This is the piece that makes user acceptance testing real. Without permission sets in the sandbox you cannot assign a beta tester to the right one, which means you cannot validate what an actual end user will see. You are rebuilding permissions by hand before testing can start, and for anyone managing several teams that cost is big enough to quietly kill the idea of testing there at all.
The history worth naming is that sandboxes have been a hard sell for exactly that reason. Until a sandbox resembles production closely enough, the setup work swallows the benefit you were testing for. That has been changing fast, and clients have started asking to test there first. Put this next to the Settings API user provisioning from earlier in the week and the pattern is bigger than sandboxes: capability gets built because sandbox parity demands it, then it lands for everybody. We are close to a place where everything is an object and every API is available. I would not be surprised if we are there by Unbound.
Watch Us Discuss This
The full segment from the show, us working through this update start to finish.
Produced by Value-First Media