Why are permission sets generally better than profile sprawl for exceptions?

Direct Answer

Permission sets are better for exceptions because they let you add focused access without cloning baseline user profiles for every variation.

Detailed Explanation

A stronger answer explains that profile sprawl becomes hard to audit, test, and maintain. Permission sets and permission set groups keep the base model cleaner and reduce long-term access chaos.

Why the Interviewer Asks This

The interviewer wants to hear scalable access design thinking.

Weak Answer Warning

A weak answer says permission sets are better only because they are newer.

Stronger Answer Direction

Talk about maintainability, auditability, and baseline versus additive access.

Follow-up Question

When would a permission set group be the stronger answer?