From cdaa9cfadb67b2766016f4a7c0d219f902d9da46 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=B6rn=20Berkefeld?= <joern.berkefeld@accenture.com>
Date: Thu, 24 Nov 2022 15:09:49 +0100
Subject: [PATCH 1/2] #297: list required permission sets

---
 README.md | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/README.md b/README.md
index 890a107..7da1cab 100644
--- a/README.md
+++ b/README.md
@@ -8,6 +8,26 @@ Copyright (c) 2022 Accenture
 
 ## Getting Started
 
+## Required Permission Sets
+
+### Users
+
+**Default Copado PS:**
+
+- Copado User
+- Copado Functions
+- Copado Job Engine
+- Quality Gates (Read Only)
+- Execute Automations
+
+**MCDO PS:**
+
+- Copado Marketing Cloud (_custom_)
+
+### Admins
+
+Please make sure to assign the System Administrator profile and additionally assign the permission sets listed for users.
+
 ### Recommended MCDEV config
 
 Please ensure you limit retrievable types to only supported ones to reduce loading times and avoid errors during deployments:

From 78d0e0f89060594b6b50d47b0871f9d3685c8e00 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=B6rn=20Berkefeld?= <joern.berkefeld@accenture.com>
Date: Thu, 24 Nov 2022 15:17:20 +0100
Subject: [PATCH 2/2] #297: add allowRead + viewAllRecords for
 copado__System_Property__c

---
 ...mcdo_Copado_Marketing_Cloud.permissionset-meta.xml | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/force-app/main/default/permissionsets/mcdo_Copado_Marketing_Cloud.permissionset-meta.xml b/force-app/main/default/permissionsets/mcdo_Copado_Marketing_Cloud.permissionset-meta.xml
index 1d5bcb8..03821b6 100644
--- a/force-app/main/default/permissionsets/mcdo_Copado_Marketing_Cloud.permissionset-meta.xml
+++ b/force-app/main/default/permissionsets/mcdo_Copado_Marketing_Cloud.permissionset-meta.xml
@@ -1,4 +1,4 @@
-<?xml version="1.0" encoding="UTF-8" ?>
+<?xml version="1.0" encoding="UTF-8"?>
 <PermissionSet xmlns="http://soap.sforce.com/2006/04/metadata">
     <applicationVisibilities>
         <application>mcdo_contributor</application>
@@ -109,4 +109,13 @@
         <object>copado__Pipeline_Action__c</object>
         <viewAllRecords>true</viewAllRecords>
     </objectPermissions>
+    <objectPermissions>
+        <allowCreate>false</allowCreate>
+        <allowDelete>false</allowDelete>
+        <allowEdit>false</allowEdit>
+        <allowRead>true</allowRead>
+        <modifyAllRecords>false</modifyAllRecords>
+        <object>copado__System_Property__c</object>
+        <viewAllRecords>true</viewAllRecords>
+    </objectPermissions>
 </PermissionSet>