# Permission sets and data space access

*Data 360 Consultant Study Guide · Data 360 Setup and Administration · Last updated October 16, 2026 · https://www.certifyforce.com/study-guide/data-360-consultant/data-360-setup-and-administration/permission-sets-and-data-space-access*

What each standard Data 360 permission set (Data Cloud Architect, Activation Manager, Activation Specialist, User) can do, why to keep the standard sets, how to migrate assignments, how data spaces and per-space feature permissions scope access, and the org settings enrichments and external org connections need.

- Certification: Salesforce Data 360 Consultant
- Exam section: Data 360 Setup and Administration
- Study guide: https://www.certifyforce.com/study-guide/data-360-consultant

**Official exam objective:**

> Configure Data 360 permissions, permission sets, and organization-wide settings.

## What the exam expects

- Assign the least-privileged standard permission set (Data Cloud Architect, Data Cloud Activation Manager, Data Cloud Activation Specialist or Data Cloud User) for a persona.
- Explain why standard permission sets beat custom ones, when cloning is the right exception, and how to migrate users in bulk with user access policies.
- Scope access with data spaces: associate permission sets, set View or Customize per data space, and fix unavailable feature permissions.
- Configure the org settings that enrichments and external org connections need, including Controlled by Parent access.

Key terms: **standard permission set** is a Salesforce-maintained Data 360 permission set updated each release; **data space** is a logical partition of data, metadata and processes; **feature permission** is View or Customize access to a feature inside one data space; **Controlled by Parent** lets users see Data 360 data in related lists when they can see the parent record; **user access policy** grants or revokes permission sets for users matching criteria.

## Key facts

| Fact | Detail | Source |
|---|---|---|
| Setup access | Data Cloud Architect set or System Administrator profile | [Create Data 360 Users and Assign Permissions](https://help.salesforce.com/s/articleView?id=data.c360_a_setup_walkthrough.htm&language=en_US&type=5) |
| Architect and Setup | Grants Customize Application; clone and remove it to restrict Setup | [Data 360 Standard Permission Sets](https://help.salesforce.com/s/articleView?id=data.c360_a_userpermissions.htm&language=en_US&type=5) |
| Clones | Keep data space associations; not updated with new object permissions | [Custom Permission Sets in Data Cloud](https://help.salesforce.com/s/articleView?id=data.c360_a_userpermissions_custom.htm&language=en_US&type=5) |
| Companion orgs | Assign Data Cloud One User | [Data 360 Standard Permission Sets](https://help.salesforce.com/s/articleView?id=data.c360_a_userpermissions.htm&language=en_US&type=5) |
| Permission set groups | Data spaces permission sets (1 per data space) can't be included | [Data 360 Limits and Guidelines](https://help.salesforce.com/s/articleView?id=data.c360_a_limits_and_guidelines.htm&language=en_US&type=5) |
| Default data space | Can't be deleted; prefixes can't be modified | [About Data Spaces](https://help.salesforce.com/s/articleView?id=data.c360_a_data_spaces.htm&language=en_US&type=5) |
| Default space association | Standard sets except Data Cloud Architect | [Associate a Permission Set with a Data Space](https://help.salesforce.com/s/articleView?id=data.c360_a_data_spaces_associate_perm_sets.htm&language=en_US&type=5) |
| Feature permission blockers | View All Records or Modify All Records on the feature's objects | [Manage Feature Access for Data Spaces](https://help.salesforce.com/s/articleView?language=en_US&id=data.c360_a_data_spaces_feature_access.htm&type=5) |
| Connector permission set | Data Cloud Salesforce Connector is for the Platform Integration User only | [Troubleshooting CRM Connections](https://help.salesforce.com/s/articleView?id=sf.c360_a_refresh_history.htm&language=en_US&type=5) |
| Copy field on products | Read, Edit, Delete; Public Read/Write default internal access | [Enrich Your Org with 360 Data and Insights](https://help.salesforce.com/s/articleView?id=data.c360_a_enrich_your_org_with_data_and_insights.htm&language=en_US&type=5) |

## Check yourself

- Why does Salesforce discourage custom Data 360 permission sets?
- When are the View and Customize feature options unavailable for a data space?
- Which standard set can create activation targets without reaching Data Cloud Setup?
- Why can't a data spaces permission set go in a permission set group?

## Sources

- [Data 360 Standard Permission Sets](https://help.salesforce.com/s/articleView?id=data.c360_a_userpermissions.htm&language=en_US&type=5)
- [Custom Permission Sets in Data Cloud](https://help.salesforce.com/s/articleView?id=data.c360_a_userpermissions_custom.htm&language=en_US&type=5)
- [Create Data 360 Users and Assign Permissions](https://help.salesforce.com/s/articleView?id=data.c360_a_setup_walkthrough.htm&language=en_US&type=5)
- [Migrate Data Cloud Permission Sets using User Access Policies](https://help.salesforce.com/s/articleView?id=data.c360_a_data_spaces_perm_set_migration.htm&language=en_US&type=5)
- [About Data Spaces](https://help.salesforce.com/s/articleView?id=data.c360_a_data_spaces.htm&language=en_US&type=5)
- [Associate a Permission Set with a Data Space](https://help.salesforce.com/s/articleView?id=data.c360_a_data_spaces_associate_perm_sets.htm&language=en_US&type=5)
- [Manage Feature Access for Data Space-Aware Data Cloud Features](https://help.salesforce.com/s/articleView?language=en_US&id=data.c360_a_data_spaces_feature_access.htm&type=5)
- [Data 360 Limits and Guidelines](https://help.salesforce.com/s/articleView?id=data.c360_a_limits_and_guidelines.htm&language=en_US&type=5)
- [Manage Data Cloud Data Access Levels for Salesforce Users](https://help.salesforce.com/s/articleView?id=data.c360_a_data_access_levels_setting.htm&language=en_US&type=5)
- [Create a Permission Set for a Related List Enrichment](https://help.salesforce.com/s/articleView?id=data.c360_a_create_a_related_list_permset.htm&language=en_US&type=5)
- [Enrich Your Org with 360 Data and Insights](https://help.salesforce.com/s/articleView?id=data.c360_a_enrich_your_org_with_data_and_insights.htm&language=en_US&type=5)
- [Enrichment Troubleshooting](https://help.salesforce.com/s/articleView?id=data.c360_a_enrichment_troubleshooting.htm&language=en_US&type=5)
- [Configure User Permissions for an External Salesforce Org Connection in Data 360](https://help.salesforce.com/s/articleView?id=data.c360_a_setting_user_permissions_to_connect_external_org.htm&language=en_US&type=5)
- [Troubleshooting CRM Connections](https://help.salesforce.com/s/articleView?id=sf.c360_a_refresh_history.htm&language=en_US&type=5)

## About the full unit

The "Core concepts", "Exam traps" and "Worked scenario" sections of this unit, its 11 linked practice questions, and unlimited timed mock exams are included with the Data 360 Consultant pack (USD $19): https://www.certifyforce.com/practice-exams