chapter source deploy fails on permissions sets

[elukaweski]

Hi.....tremendous book !!! Glad to see all your ideas, which are discussed in various blogs, distilled into one central book.

I have an issue when deploying any individual chapter source via 'ant deploy'. The error I get is:
Error: Unknown user permission:
where is something like ManageUnlistedGroups
the workaround I use is to delete the permission sets folder from src...and remove the reference to commission sets from the package.xmkl file.

I have researched and cannot discover why I am getting this error. Any clues?
Thanks
Edwin

[afawcett]

This is a frustrating design issue with permission sets in my view, something i later discussed in this blog. Basically the fix is to remove all but required 'positive' permissions from the files (in this case all the userPermission entries). I'll make the changes in the .permissionSet files though in the repo to avoid this issue for others.

[afawcett]

Oh and thank you for your kind comments on the book, glad your enjoying it! 👍

[afawcett]

Note that depending on the features and type of org you have some user permissions don't exist, this is known as 'org shape' generally, by removing all unwanted and unneccessary entries from .permissionset files you avoid hitting this issue. In your case, ManageUnlistedGroups, its possible this permission is related to a configurable feature not on in your org, either due to you not enabling the related feature or it being not enabled in your org since its an old org. Hope this helps further with some more explanation.

[elukaweski]

thanks for the quick response.

For now, I'll continue to just delete the files and look for the commit where you remove the "non-positive' permissions.
I just wonder why they are all there in the first place. When I build some permission sets as per the book (chapter 2 or 3), the resultant file is not the complete set of permissions.
Edwin

[afawcett]

Its an odd behaviour of how the Salesforce download of these metadata types work. Basically the files contain user access permissions, then only field/object/tab etc. permissions that relate to the objects/tabs etc your also retrieving in the same download. There is no direct way to say "give me all thats in the permission set" without specifying the entire system in the download request. I'm not sure if i covered this in the book or not, but i'm tending not download them and simply maintain them in source form. I also wrote a blog on with some more thoughts here.