Profiles in Zoho CRM define what each user can see and do across modules, layouts, fields, buttons, reports and exports. Use profiles to create role-based permission sets that match job functions and protect sensitive data.
What is it
Profiles let administrators control module-level and field-level permissions, plus action-level rights (create, edit, delete, view, export, import, print) for groups of users in Zoho CRM. Assign a profile to any user to instantly apply the same permissions and UI visibility rules. Profiles work with Roles and sharing rules to enforce who can access records and what actions they may perform on them. They also control access to features such as reports, dashboards and API operations for that group of users.[2][8]
When to use it
- Limit access to financial, legal or HR fields so only finance or HR users can view or edit them, while sales sees only the fields they need.[2]
- Give contractors or temporary staff read-only access to specific modules and prevent data export or deletion.[3]
- Create a “Sales Manager” profile that can edit deals across territories and run reports that a front-line salesperson cannot.[8]
- Block mass update, data import or export for junior roles to reduce accidental data loss.[2]
- Provide a support-team profile that sees Cases and Contacts, but no access to Quotes or Sales forecasts.[8]
How to access it
Open Setup, go to Users & Control > Security Control > Profiles and select New Profile or edit an existing one to set module permissions, field-level access and action rights; assign profiles from the Users list in Setup.[3][8] For programmatic access, use the Zoho CRM Settings API endpoint for profiles (GET /crm/v2/settings/profiles) to list profiles and their permission metadata; use the corresponding POST/PUT endpoints to create or update profile definitions via API.[3]
Related features
- Roles — control record-level ownership and reporting hierarchy that works together with profiles to determine who can see which records.[8]
- Permission Sets (or Permission Templates) — apply additional, scoped permissions to specific users without changing their profile when you need exceptions.[3]
- Data Sharing Rules — open or restrict record visibility across roles and groups for cases where profiles alone don’t meet access requirements.[8]
- Field-level security and layout rules — hide or make fields read-only at the profile level for more granular UI control.[2]
Next step: review the Profiles page in Setup, compare current profiles to job functions, and update or