User profile permission explanation

Profile controls

• There are two types of system permissions in a profile, Administrative and General.
• You can create a Custom Profile or a Permission Set if you have either Enterprise or Performance Edition to give access.
• In Contract Manager, Group, and Professional Editions you have 6 Standard Profiles that cannot be customized by default, but permissions can be added. 

Administrative Permissions

• Access Chatter For Sharepoint – Allows the user to access Chatter for Sharepoint.
• API Enabled  – Allows the user to access salesforce using API. 
• Api Only User – Allows the user to access Salesforce through API instead of the user interface.
• Assign Permission Sets – Allows the user to assign Permission Sets to users.
• Author Apex – Allows the user to create and EDIT Apex classes and Triggers.
• Bulk API Hard Delete – Allows user to delete records in the Bulk API without storing them in the Recycle Bin (soft delete).
• Chatter Internal User – Allows user to use all of the Chatter features.
• Create and Customize List Views – Allows the user to create list views; modify and delete own list views.
• Create and Manage Communities – Allows the user to create and manage Communities, add Community members, and customize the appearance.
• Create and Own New Chatter Groups – Allows the user to create and own new Chatter groups.
• Create and Upload Change Sets – Allows the user to create, edit, and upload outbound Change Sets.
• Customize Application – Allows the user to customize the Organization using App Setup menu options like workflows, creating custom fields, or  Lead settings.
• Deploy Change Sets – Allows the user to deploy inbound Change Sets.
• Edit HTML Templates – Allows the user to create, edit, and delete HTML email templates.
• Edit Read Only Fields – Allows the user to edit fields that are configured as read only fields due to Page Layouts or Field-level Security.
• Hide the Seen By List – If ‘Hide the Seen By List’ is enabled for a user they don’t see ‘seen-by’ information.
• Hide Option to Switch to Salesforce Classic – Assign to users to remove the switcher to Salesforce Classic option
• Invite Customers To Chatter – Allows the user to invite customers (non-Salesforce users) to Chatter.
• IP Restrict Requests – Allows the portal user to only login from a limit of 5 IPs addresses.
• Is Single Sign-On Enabled – Allows a user to sign on using Delegate username and password authentication to a corporate database instead of the Salesforce user database.
• Lightning Experience User – Allows a user to access the lightning user interface
• Manage All Private Reports and Dashboards – Delete Reports and Dashboards from personal or private folders
• Manage Analytic Snapshots – Allows the user to create, edit, and delete Analytic Snapshots.
• Manage Articles – Allows the user to create article types and article actions.
• Manage Auth. Providers – Allows the user to create and edit Auth. Providers.
• Manage Billing- Allows the user to purchase additional licenses and features for Salesforce, as well as access to Checkout
• Manage Business Hours Holidays – Allows the user to make changes or update to business hours and holidays in the organizational settings.
• Manage Call Centers – Allows the user to import, view, edit, or delete call centers in CRM.
• Manage Categories – Allows the user to create or change solutions in the CRM.
• Manage Chatter Messages – Allows the user to access all users’ messages sent in Chatter through  a SOAP API.
• Manage Custom Report Types – Allows the user to create, edit, and delete custom report types.
• Manage Dashboards – Allows the user to create, edit, and delete the user’s personal dashboards.
• Manage Data Categories – Allows the user to create, edit, and delete data categories.
• Manage Data Integrations – Allows the user to monitor or abort Bulk API jobs.
• Manage Dynamic Dashboards – Allows the user to create, edit, and delete dynamic dashboards.
• Manage Email Client Configurations – Allows the user to create, edit, and delete Outlook configurations for Salesforce for Outlook.
• Manage External Users – Allows the user to manage Partner Portal users.
• Manage Internal Users – Allows the user to create and edit internal users.
• Manage Knowledge Article Import/Export – Allows the user to import/export Articles.
• Manage IP Address– Allows the user to input IP addresses in Network Access settings and IP Restrictions on the profile inside of Salesforce.
• Manage Letterheads – Allows the user to create, edit, and delete letterheads layouts for HTML emails.
• Manage Login Access Policies – Allows the user to specify the login access policies that apply to Administrators and Support Organizations.
• Manage Mobile Configurations  – Allows the user access to Salesforce Mobile features.
• Manage Package Licenses – Allows the user to manage package licenses in subscriber Organizations.
• Manage Password Polices – Allows the user to set password restrictions and lockout policies for users.
• Manage Profiles and Permission Sets – Allows the user to create, edit, and delete profiles and Permission Sets.
• Manage Public Documents – Allows the user to create, edit, and delete folders for public documents.
• Manage Public List Views – Allows the user to create, edit, and delete public list views.
• Manage Public Reports – Allows the user to create, edit, and delete public reports.
• Manage Public Lightning Email Templates – Allows the user to create, edit, and delete text emails, mail merge templates and folders for public email templates.
• Manage Public Classic Email Templates – Allows the user to create, edit, and delete text emails, mail merge templates, and folders for public email templates
• Manage Reporting Snapshots – Allows the user to create, edit, and delete reporting snapshots.
• Manage Roles – Allows the user to create, edit, and delete roles.
• Manage Salesforce CRM Content – Allows the user to make changes in the CRM content.
• Manage Sharing – Allows the user to manage sharing configurations, including Organization-wide defaults.
• Manage Salesforce Knowledge – Allows the user to create article types.
• Manage Users – Allows the user to create, edit, and deactivate users, and manage security settings, including profiles and roles.
• Manage Unlisted Groups – Allows the user to view and moderate unlisted Chatter Groups.Only members and users with the “Manage Unlisted Groups” permission can access unlisted groups in list views, feeds, and search results.
• Moderate Chatter – Allows the user to deactivate Chatter Free users, assign moderator privileges to Chatter Free users, and remove posts.
• Moderate Communities Feeds – Allows the user to moderate Chatter Feeds in Communities.
• Moderate Communities Files – Allows the user to moderate Chatter Files in Communities.
• Modify All Data  – Allows the user to make changes to all the data in the Organization.
• Password Never Expires – Allows the user to a have a password that does not expire. This  permission is good for any user that is only used in API.
• Reset User Passwords and Unlock Users – Allows the user to unlock users whose accounts are locked, and reset user passwords.
• Run Flows – Allows the user to run flows in Salesforce.
• Schedule Dashboards – Allows the user to schedule when dashboards refresh, and send email notifications that include refreshed dashboards in HTML format.
• Schedule Reports – Allows the user to run reports in the background, and export results as a CSV or Excel file on completion.
• Send Outbound Messages – Allows the user to send outbound messages to an external Web service API.
• Show Custom Sidebar On All Pages – Allows the user to display a custom sidebar on all pages in Salesforce.
• Transfer Record – Allows the user to change the owner of most records.
• Use Identity Features – Allows the user to  access to Identity features such as App Launcher.
• Use Team Reassignment Wizards – Allows the user to mass transfer team members.
• View All Data – Allows the user to view all the data in the Organization the user does adhere to the Organization wide defaults.
• View All Users – Allows the user to view all users object, regardless of sharing settings configuration.
• View Data Categories – Allows the user to view the Data Categories page.
• View and Edit Converted Leads–  Allows a user with the permission enabled to view converted leads. Users will  also  be able to edit the converted leads.
• View Global Header – Allows the user view the global header to switch between apps and access personal setup and customization options.
• View Help Link – Allows the user to view help link.
• View Setup and Configuration – Allows the user to view the App Setup menu and Administrative Settings pages.
• Weekly Data Export – Allows the user to run the weekly data export service.

General User Permissions

• Activate Contracts – Allows the user to change contract’s status to Activated.
• Approve Contracts – Allows the user to apply an approved status to a contract.
• Assign Topics – Allows the user to assign existing topics to feed items and remove topics from feed items.
• Connect Organization to Environment Hub – Allows the user to connect this Organization to an Environment Hub.
• Convert Leads – Allows the user to convert Leads need “Create” and “Edit” on Leads, Contacts, and Opportunities with “Read” permission on any related Campaigns., Accounts
• Create AppExchange Packages – Allows the user to create packages that can be distributed through AppExchange.
• Create and Customize Reports – Allows the user to create, edit, and delete reports.
• Create Report Folders – Allows the user to create, edit, and delete report folders and manage these folders if sharing rights allow.
• Create and Share Links to Chatter Files – Allows the user to Share a Chatter file with anyone by creating a file link and sending it via email or IM.
• Create Libraries – Allows the user to create Salesforce CRM Content libraries.
• Create Topics – Allows the user to add new topics to a record.
• Delete Activated Contracts – Allows the user to delete an activated contract.
• Delete Topics – Allows the user to add or delete topics on a record.
• Deliver Uploaded Files and Personal Content – Allows the user  to create content deliveries from a shared library in Salesforce CRM content.
• Download AppExchange Packages – Allows the user to install  managed AppExchange apps in the Organization.             
• Drag-and-Drop Dashboard Builder – Allows the user to create, edit, and delete dashboards through the drag-and-drop dashboard.
• Edit Case Comments – Allows the user to edit their own case, but not other user’s comments.comments
• Edit My Dashboards – Allows the user to edit, move, save, and delete user’s own dashboards in shared folders.
• Edit Events – Allows the user to create,edit, and delete events.
• Edit Opportunity Product Sales Price – Allows the user to change the sales price on Opportunity line items.
• Edit Tasks – Allows the user to  create, edit, and delete tasks.
• Edit Topics – Allows the user to edit topic names and descriptions.
• Email-Based Identity Verification Option – Allows a user to only receive Email Based Identity confirmation instead of SMS.
• Export Reports – Allows the user to Use Export Details and Printable View to export reports.
• Import Leads – Allows the user to import leads through the Import Wizard.
• Import Solutions – Allows the user to import solutions using the Import Wizard.
• Insert System Field Values for Chatter Feeds – Allows the user to set the CreatedById or CreatedDate for chatter post or comment from API when creating the record.
• Knowledge One – Allows the user to view the knowledge tab instead of the articles tab.
• Manage Cases – Allows the user to administer case settings, including Email-to-Case and mass transfer of cases.
• Manage Flow – Allows the user to use flows
• Manage IP Addresses – Allows the user to create, edit, and delete trusted IP ranges. 
• Manage Connected Apps – Allows the user to manage, create, and delete OAuth applications.
• Manage Content Permission – Allows the user to configure library content in Salesforce CRM content.
• Manage Content Properties – Allows the user to create, edit, and delete custom fields in Salesforce CRM content.
• Manage record types and layouts for Files – Allows users to administrate content in non-Chatter enabled orgs (in Chatter-enabled orgs, this permission doesn’t do anything; access is controlled via the “Customize Application” permission)
• Manage Leads – Allows the user to change the status of multiple Leads in a list view.
• Manage Published Solutions – Allows the user to create, edit, and delete solutions that accessible to the public on your Self-Service portal or Web site.
• Manage Territories – Allows the user to make changes in the territories settings in the Setup menu.
• Mass Edits from Lists – Allows the user to mass edit records from the list view.
• Mass Email – Allows the user to mass email Contacts and Leads.
• Manage Two-Factor Authentication – Allows the user to manage the time based token secret for Two-Factor Authentication
• Lightning Login -Allows a user to use the Lightning Login feature.
• Remain in Salesforce Classic – Allows the users who wants to remain on Classic Interface
• Report Builder – Allows the user to create, edit, and delete reports using the Report Builder interface.
• Run Reports – Allows the user to view the reports tab, run reports, view dashboards based on reports.
• Send Email – Allows the user to send email to a single Contact or Lead.
• Tag Manager – Allows the user to rename or delete Public Tags.
• Transfer Cases – Allows the user to change the case owner field on the case Object.
• Transfer Leads – Allows the user to change the Lead owner field on the Lead Object.
• Two-Factor Authentication for API Logins – Allows the user to create a time-based token using a mobile phone to scan a QR code generated instead of theemailed security token in the API login attempt.
• Two-Factor Authentication for User Interface Logins – Allows the user to create a time-based token using the mobile phone to scan a QR code generated during login.
• Upload AppExchange Packages – Allows the user to upload packages to AppExchange. Create and upload Change Sets.
• View Encrypted Data – Allows the user to view the value of encrypted fields in plain text.
• View My Team’s Dashboards – Allows the user to view dashboards owned by people under them in the Role Hierarchy.
• View Reports in Public Folders – Allows the user to view and access reports in public folders, which does not include others’ personal folders. 
• Edit My Reports – Allows user to edit, move, save, and delete user’s own reports created in shared folders.

For user permission, read our Available Feature Licenses documentation.