Salesforce Permission Set & Profile Diff and Merge Tool

A VS Code extension that compares Salesforce Permission Sets and Profiles with version on the org, showing missing unique and differing entries, enabling granular diffing of individual permission set and profile elements.

Supported Metadata Types

Permission Sets (.permissionset-meta.xml)
Profiles (.profile-meta.xml) - Including large profiles with 10k+ lines

Motivation

When comparing permission sets or profiles, you often want to see the differences between the two versions. But in standard diff tools you see reordered entries, including ones that were not changed. All changes come in blocks, and individual permissions can't be comfortably applied. This is especially problematic for large profiles that can have thousands of lines. So once annoyed by this, I decided to create this extension.

Prerequisites

For org comparison functionality, you need:

Salesforce CLI (SF CLI) v2.x installed and configured
A default org set using sf config set target-org <your-org-alias> or with VS Code Salesforce Extension
Note: The extension uses the modern sf CLI, not the legacy sfdx CLI

How to use

SFDiff can be called from the Command Palette with command "SFDiff: Compare with Org" or click on icon in the Editor Context Menu. Works with both Permission Sets (.permissionset-meta.xml) and Profiles (.profile-meta.xml).

Base is the permission set or profile on your local file. Reference is the version on the org. Each action is applied to the local (base) file. SFDiff shows only missing, unique and differing entries, same permissions present in both base and reference are hidden.