clone the standard user profile: existing profile: standard user profile name: sales control access for the sales profile: standard object permissions: accounts: read, create, edit contacts: read, create, edit field permissions: rating field on the accounts object: no access all other permissions from the standard user profile remain as is create a new permission set: label: rating api name: rating user license: salesforce control access for the rating permission set: field permissions: rating field on the accounts object: read access, edit access