Said It Here

How to fix users incorrectly given admin privileges

Standard management tools make it difficult to scale back excessive permissions or restrict access using Permission Set Licenses once elevated roles have been assigned. This creates security vulnerabilities and leaves administrators unable to properly control user access levels.

What people tried

Every workaround mentioned in the threads below. We haven’t tested any of them — and nobody here is claiming they worked.

  1. 1
    swap the profile immediately and waiting for any feedback to see what if they are missing anything
  2. 2
    use Permission Sets/Permission Set Groups to grant back only the specific access they actually need
  3. 3
    Adding a muting permission set to a permission set group to suppress license-granted permissions.

In their words

Unedited, most upvoted first, each linked to the thread it came from.

I don't understand how we're supposed to be able to limit access with these PSLs?source ↗

Apprehensive_Ad4983 · r/salesforce · 3 upvotes

Unfortunately, some Non-Admin users were given System Administrator privileges.source ↗

Large-Shelter6222 · r/salesforce · 1 upvotes

Where this came up

People with this problem also raised