List unnecessary assigned permission sets

[EricBURTE]

Is your feature request related to a problem? Please describe.
this issue is coming from your 2023 Dec 2nd's linkedin post :
In order to do some cleaning within my permission sets I would like to be able to differentiate among permission sets the ones that are useful, and the ones that are useless because not assigned or overlapping other already assigned permissions

Describe the solution you'd like
Up to you : See all permission sets without assignment to active users

Describe alternatives you've considered
Could be interesting to see overlapping permissions ;)

Additional context
Have a look at your SFDX plugin for more information :)

[VinceFINET]

let's do this !!

[VinceFINET]

article is there https://medium.com/@VinceFINET/if-you-think-you-have-no-more-license-available-in-you-salesforce-organization-this-article-is-for-29f76e830e35

[VinceFINET]

@EricBURTE

That article is nice to better understand the data model behind PermissionSet and PSLicense.
Now, let's try something else:

Step 1 Do the following query:

SELECT Id, DeveloperName, TotalLicenses, UsedLicenses,
     (SELECT Assignee.Id, Assignee.IsActive FROM PermissionSetLicenseAssignments)
FROM PermissionSetLicense
WHERE UsedLicenses > 0

Step 2 Manipulate the result (in JSON via JsForce for example) in Javascript:

const results = permissionSetLicenses.map((psl) => {
     // Get the disctinct users that are assigned to this psl with their status
     const distinctAssignee = psl.PermissionSetLicenseAssignments.records
          .map((psla) => { return { id: psla.Assignee.Id, isActive: psla.Assignee.IsActive }; })
          .filter((value, index, array) => array.indexOf(value) === index);
     // Map the data to highlight potential difference between usedLicenses and countActiveAssignee
     return {
          id: psl.Id,
          devName: psl.DeveloperName
          totalLicenses: psl.TotalLicenses,
          usedLicenses: psl.UsedLicenses,
          remainingLicenses: (psl.TotalLicenses - psl.UsedLicenses),
          countActiveAssignee: distinctAssignee.filter((u) => u.isActive === true).length,
          countInactiveAssignee: distinctAssignee.filter((u) => u.isActive === false).length
     };
})

Step 3: In the previous list if "usedLicenses" and "countActiveAssignee" are different that means something is not in synch right?

results.filter((d) => d.usedLicenses !== d.countActiveAssignee);

What do you think?

[VinceFINET]

that would have been too good....
the usedLicenses is indeed ALWAYS equal to countActiveAssignee

[VinceFINET]

In the global view:

[VinceFINET]

In the new dedicated tab

[EricBURTE]

Great news ! Thanks @VinceFINET !