Different Commit Operations - "Commit Files" vs "Full Profiles and Permission sets"
Commit Files Operation - Incremental Changes
As a best practice, we will always use the "Commit Files" operation, which allows us to commit the profile/perm set changes incrementally (only commit & deploy what has changed, and not the full permset/profile).
For this, we will have to select the profile or permset, and additionally select as "retrieve only" the metadata for which permission has been modified (you can add the metadata without "retrieve only" if you also need to include the metadata change in the commit).
For example, to commit a profile where a field permission has been updated, and an apex class permission has been updated, it would look like the following (the same would apply for permission sets):
(Note that this is just an example)
On deployment of this, copado will only deploy the changed permissions, and will not touch any other permission, even if orgs are misaligned. This is why this is a safe operation.
Copado provides documentation about how to do this, the most relevant link is Commit incremental changes in Copado.
Full Profiles & Permission Sets Operation
⚠️⚠️⚠️ This should only be used when we want to commit the full profile/permission set, and never when we just want to update a few permissions on it ⚠️⚠️⚠️. For example, if we have just created a profile/permset and we want to quickly commit it, we can use the operation. However if the profile/perm set already exist in production, we should not use this operation, because if there is any minor difference between the org where the commit is done and production, production will be accidentally overriden.
An example of using this operation can be seen in the next screenshot. On this example, copado will retrieve the complete set of permissions (of objects, fields, classes, system permissions, app permissions, ... everything) and will commit it to the branch.
Copado provides documentation about how to do this, the most relevant link is Copado Full Profiles and Permission Sets, be mindful of the Important considerations on it.
The best way to get IT support is to use the new
Service One Platform.