Assign Suger Permission Sets to Your Team
Assign the correct Suger permission set to each person on your team so they see the right Suger tabs and action buttons in Salesforce.
Overview
Suger permission sets work like job roles for the Suger App. Each set controls two things:
- Which Suger tabs are visible — for example, the Offers tab or the Referrals tab.
- Which action buttons appear — for example, the New Offer or New Co-Sell button on an opportunity record.
Every person who uses the Suger App needs at least one permission set assigned to them. Without one, they won’t see any Suger buttons or tabs.
For full permissions details, see Custom Permissions.
Prerequisites
- The Suger App must already be installed in your Salesforce org. See Salesforce Integration.
- You need Salesforce Administrator access to assign permission sets.
Step 1: Find the Right Permission Set for Each Person
Use the tables below to pick the right permission set based on what each person needs to do.
For Most Users — Start Here
| Permission set | What they can do | Assign to |
|---|---|---|
| Suger User | Full read/write access to all Suger features across all clouds — offers, referrals, entitlements, buyers, and products. Cannot access Suger Settings. | Power users, sales ops, or anyone who works across multiple clouds |
| Suger User - Read Only | View all Suger data across all clouds. Cannot create or edit anything. | Managers, executives, or anyone who only needs visibility |
| Suger User - Marketplace | Create and manage offers and entitlements across all clouds. No access to co-sell referrals. | Sales reps focused on marketplace deals |
| Suger User - Cosell | Create and manage co-sell referrals across all clouds. No access to offers or entitlements. | Business development or partner managers focused on co-selling |
| Suger Approver | Approve or reject offers and co-sell referrals. | Deal desk, sales managers, or anyone in an approval workflow |
For Cloud-Specific Access
Use these if a team member should only work with one cloud provider — for example, an AWS-focused rep who should not see Azure or GCP records.
Marketplace (offers and entitlements)
| Permission set | Cloud access |
|---|---|
| Suger Marketplace - AWS | AWS offers and entitlements only |
| Suger Marketplace - Azure | Azure offers and entitlements only |
| Suger Marketplace - GCP | GCP offers and entitlements only |
| Suger Marketplace (Read Only) | View-only access to offers and entitlements across all clouds |
Co-sell (referrals)
| Permission set | Cloud access |
|---|---|
| Suger Cosell - AWS | AWS co-sell referrals only |
| Suger Cosell - Azure | Azure co-sell referrals only |
| Suger Cosell - GCP | GCP co-sell referrals only |
| Suger Cosell (Read Only) | View-only access to referrals across all clouds |
For the Integration User Only
| Permission set | When to use |
|---|---|
| Suger Integrator | Assign to the Integration User created during installation. Do not assign this to human users — it grants full system access including Settings. |
| Suger Integrator (Salesforce Integration License) | Same as above, but for Integration Users on a Salesforce Integration License. |
Step 2: Assign the Permission Set
Repeat these steps for each person who needs access to the Suger App.
- In Salesforce, click the Gear icon (⚙️) → Setup.
- In the Quick Find box, type
Permission Setsand select Permission Sets. - All Suger permission sets start with the word Suger — scroll or search to find the one you want to assign.
- Click the permission set name to open it.
- Click Manage Assignments.
- Click Add Assignments.
- Find and select the user you want to assign it to.
- Click Assign.
Step 3: Verify the Assignment Worked
Ask the user to log in to Salesforce and open a Salesforce opportunity record. They should see the Suger widget on the page with the buttons that match their permission set.
For example:
- A user with Suger User - Marketplace should see a New Offer button but no New Co-Sell button.
- A user with Suger User - Cosell should see a New Co-Sell button but no New Offer button.
- A user with Suger User should see both.
If the right buttons are not showing, see the troubleshooting section below.
Troubleshooting
| Issue | Possible cause | Resolution |
|---|---|---|
| User sees no Suger buttons or tabs at all | No Suger permission set has been assigned | Go back to Step 2 and assign the appropriate permission set |
| User sees buttons they should not have access to | Extra custom permissions were auto-enabled when the package was installed | Go to the user’s profile in Salesforce → Custom Permissions and uncheck any Suger permissions that should not apply |
| User still sees wrong buttons after assigning the correct permission set | Salesforce cached the previous permissions | Ask the user to do a hard refresh — Cmd+R on Mac or Ctrl+Shift+R on Windows |
| User cannot see records they should have access to | Object or field-level security (FLS) is blocking access | Verify the user has Read and View All access on Account, Contact, Opportunity, and any other objects relevant to their role |
Frequently Asked Questions
Can I assign more than one Suger permission set to the same user?
Yes. For example, you can assign both Suger Marketplace - AWS and Suger Cosell - AWS to give a user full AWS access for both offers and referrals without giving them access to Azure or GCP.
What happens if I assign Suger Integrator to a regular user by mistake?
They will gain access to Suger Settings and all system-level features. Remove the permission set immediately and replace it with the appropriate user-facing permission set.
A user is a Salesforce System Administrator — do they need a Suger permission set?
No. System Administrators automatically have full access to all Suger features regardless of which permission sets are assigned.
I assigned the right permission set but the user still can’t create offers for a specific cloud. What’s wrong?
Check whether they have a cloud-specific permission set instead of a generic one. For example, Suger Marketplace - AWS only shows AWS products when creating an offer. If they need to create offers across multiple clouds, assign Suger User - Marketplace or Suger User instead.
What is the difference between Suger User - Marketplace and Suger User - Cosell?
Marketplace covers offers, entitlements, buyers, companies, and products. Co-sell covers referrals. They are separate because some teams — like a dedicated co-sell team — only need one and not the other. If a user needs both, assign Suger User.