Issue Importing Permission Set

They won’t get pulled across to the End User Role, that isn’t how the Permission Structure works.  The End User Role if it is simply to roll up the Functional Roles beneath it might have no grants in and of itself - which is fine, it will still work.  You can’t view the End User Role and see the sum total of all the functional roles in the permission set.  

Think of the End User Role as a Phantom layer in a structure, it doesn’t have to do anything on its own, it just passes through the grants that are layered below it.

If you can see all of the functional roles in the View Permission Structure view, then it will work with their grants, but you won’t see any of them in the view you show attached.

I wouldn’t expect the grants of a Functional Role assigned to an End User role to show up in that End User role “Navigator Preview” screen.  That really only happens at runtime.

Are you also saying that if a user logs in with that End User role they don’t actually see the Functional Role grants?  If so, that would be very strange... in that case I would suggest that you might want to refresh the Security Cache and perhaps double check the logs from the import to see if there were any errors that you did not notice.

Nick

@NickPorter - To answer your second question, that is exactly what is happening. The user logged in with the End User Role but it was blank. We did have some errors in the import log but it all revolved around customizations. We had the same error logs with other imported permission sets but had no problems with them.

@ShawnBerk Thank you for the information. That was my thinking too. Upon further review of our customer’s permission sets, it looks like they may have granted some access on the End User Role. We were able to determine that because we saw differences in the Nav Previews in the End User Role and the Functional Role. I think that’s why I was confused when looking at the Nav Previews at first. 

However, as stated to @NickPorter when the End User Role is granted to the user they don’t see of the Functional Role grants. It’s very weird and I have never seen that before when importing permission sets.

@Nik_K Did you try to force a refresh on the Security Cache, then try logging on with the user again?  If that doesn’t fix it by itself,  the only other thing I can think of given the described scenario is to remove and reassign the functional roles to the end user role then refresh cache.

All I can think is that the fact that you are doing a Replace of an existing end user role it may not correctly be bringing in the hierarchy structure - possibly happening due to those errors you noted. 

Those errors seem to indicate that the custom package and values are not yet imported or enabled in the target environment you are importing the permissions to.  If that is the case, I can see why some of the functional roles are failing even if others are not failing.

I would correct whatever the source of those errors are first then reimport the permissions, I think you will continue to see odd things till the errors are cleared.