We have made a few updates to the PermissionSets API to support global user management and app-specific permission sets:

1. A new optional query parameter app has been added to the GET /permissionSets endpoint:
• app - for filtering permission sets by type (deals, projects, campaigns, global, and account_settings)
2. The 3 following response fields have been added to the GET /permissionSets and GET /permissionSets/{id} endpoints:
• app - describes the type of the permission set
• description - contains the description for the permission set
• type - contains the type of the permission set (admin, manager, regular, or custom)

And the following updates to the Users API:

1. A new optional body parameter access has been added to the POST /users endpoint to assign access rights for the user.
2. A new response field access has been added to six endpoints, including:
• GET /users
• GET /users/find
• GET /users/me
• GET /users/{id}
• POST /users
• PUT /users/{id}

The access response field contains information about the user’s admin status, the permission sets assigned to the user, and the permission set IDs.

“access”: [ 
   {
      "app": "sales",
      "admin": false,
      "permission_set_id": "f07d229d-088a-4144-a40f-1fe64295d180"
   },
   {
      "app": "global",
      "admin": true,
      "permission_set_id": "233b7976-39bd-43a9-b305-ef3a2b0998e5"
   }
]