Create and Assign a Permission Set to Developer Users

To give full access to the Dev Hub org, create and assign a custom permission set that grants access to required Dev Hub objects. Or if you have the Developer license, assign the Developer permission set.

If you’re providing access to the Dev Hub org using the standard Developer license, it also includes a built-in Developer permission set. This permission set provides the required permissions for scratch orgs, and unlocked and second-generation managed packaging. You can use the provided Developer permission set or create your own.

Follow the steps to create a permission set, then add the required scratch org and packaging permissions.

  • Object Settings > Scratch Org Infos > Read, Create, Edit, and Delete
  • Object Settings > Active Scratch Orgs > Read, Edit, and Delete

To work with unlocked or second-generation managed packages in the Dev Hub org, the permission set must contain the scratch org permissions and:

  • Object Settings > Namespace Registries > Read
  • System Permissions > Create and Update Second-Generation Packages

The system permission provides access to:

Salesforce CLI CommandTooling API Object (Create and Edit)
package createPackage2
package version createPackage2VersionCreateRequest
package version updatePackage2Version

To assign one or more users to a permission set, or to remove a user from a permission set, see Manage Permission Set Assignments in Salesforce Help.