For Salesforce Independent Software Vendor (ISV) partners, the traditional "one-size-fits-all" licensing model has long been a source of strategic frustration. In a market that increasingly demands flexibility, forcing every user to accept the same level of access creates an unavoidable dilemma: partners must either charge a flat rate that ignores actual usage patterns—potentially leaving significant revenue on the table—or offer lower-cost tiers without the technical infrastructure to enforce those boundaries. Neither approach provides the precision required to monetize modern solutions effectively. However, a significant evolution in the Salesforce ecosystem is poised to change this landscape, allowing partners to align their revenue models with the actual value delivered to their customers.
At Dreamforce, Salesforce unveiled the next phase of AgentExchange, repositioning it as a unified, central destination where both human users and AI agents can discover, evaluate, purchase, and manage partner-built solutions. Central to this vision is AgentExchange Commerce, a toolset that allows partners to unify procurement and billing through private offers, providing the flexibility to define tailored pricing and contractual terms. Now, by integrating Permission Set Licenses (PSLs) into Second-Generation Managed Packages (2GP), Salesforce is taking this concept of tiered monetization to a more granular level. This development allows partners to define specific feature access within a single package and automate license provisioning, effectively creating differentiated pricing tiers backed by platform-enforced controls, all without the operational burden of manual licensing management.
The Operational Bottleneck of Legacy Licensing
Historically, the process of managing licenses through the traditional License Management App (LMA) has been defined by significant operational friction. Under the legacy model, partners often struggled with a rigid architecture that forced them into an "all-or-nothing" approach to feature access. When a partner released a package, they were often limited in how they could distribute specific features to different user groups within the same customer organization. This necessitated manual audits and a heavy reliance on "contractual trust" to ensure that customers were not exceeding their purchased rights.
Beyond the lack of enforcement, the administrative overhead associated with manual LMA entries created a lag between the point of sale and the point of fulfillment. In many instances, it could take hours or even days to provision licenses after an order was signed, introducing friction into the customer experience at the very moment of onboarding. This delay, coupled with the inability to dynamically adjust access based on a user’s specific role or needs, meant that partners were limited in their ability to upsell, cross-sell, or implement consumption-based pricing models effectively.
Transforming 2GP into a Tiered Delivery Engine
The introduction of Permission Set Licenses within 2GP packaging marks a fundamental shift, transforming the packaging process into a modular, tier-ready delivery engine. The primary advantage of this new model is the removal of manual intervention. Under the new framework, license delivery is triggered automatically the moment an order is activated. This instantaneous fulfillment eliminates the "fulfillment gap," ensuring that customers have immediate access to the features they have purchased exactly when the contract begins.
This model changes the fundamental mechanics of access control. Rather than relying on static, package-wide licenses, partners can now leverage object CRUD (Create, Read, Update, Delete) permissions, custom permissions, and specific user licenses to gate functionality. Because these controls are enforced at the platform level, the risk of unauthorized access is mitigated by default. If an administrator attempts to assign a license or feature to a user that has not been purchased or provisioned for that specific tier, the platform will automatically block the assignment. This move from a reliance on manual audits to platform-level, automated enforcement represents a significant maturity leap for the ISV ecosystem.
Precision Control Through Platform Levers
Partners now have three distinct platform levers to construct highly tailored offerings. The first is granular feature access, which allows partners to define exactly which objects, fields, or custom capabilities a specific user can interact with based on their license type. The second lever involves custom permissions, which can be used to control access to specific workflows or administrative functions within the app. Finally, the integration of user licenses allows for the creation of distinct tiers—such as a "basic" portal user versus an "advanced" clinical staff user—ensuring that each tier is perfectly aligned with the customer’s operational requirements.
To illustrate the practical application of this, consider a healthcare ISV offering a complex Clinical Care and Patient Operations application. Previously, the partner might have struggled to sell this as a single package because they could not effectively separate the access rights of a patient using a portal from a nurse performing administrative tasks or a specialist writing prescriptions. With the new PSL-enabled 2GP model, the partner defines a foundational PSL along with specific definitions for the patient portal, clinical staff, and advanced prescribers.
In their Partner Business Org (PBO), the developer maps these PSLs into specific SKUs or Partner Provisionable Products. They might create a "Patient Portal Tier" that includes only the foundational app and the patient portal permissions at a lower price point, a "Nurse/Admin Tier" with clinical staff permissions at a mid-range price, and an "Advanced Prescriber Tier" for specialists at a premium price. When a hospital signs an order, Salesforce automatically provisions the exact counts of each PSL to the subscriber organization. Because the enforcement is handled by the platform, the hospital’s admin cannot inadvertently assign advanced prescribing rights to a patient portal user. The monetization model is now locked directly into the technical implementation of the app.
Driving Business Impact and Growth
The business implications of this transition are profound. For ISVs, the ability to offer tiered, platform-enforced packages directly translates into a more sophisticated go-to-market strategy. Partners are no longer forced to choose between the simplicity of a single package and the complexity of managing multiple, disparate apps to achieve different price points. Instead, they can maintain a single, consolidated code base while still delivering a highly personalized experience to different segments of their customer base.
This modularity also opens the door to new revenue opportunities. By lowering the barrier to entry with a "lightweight" tier, partners can gain a foothold in new accounts and then provide a seamless path to upgrade users to advanced tiers as their needs evolve. The reduction in manual fulfillment and the elimination of manual audits also free up operational teams to focus on product innovation rather than administrative maintenance.
By aligning what is sold with what the customer can actually access, partners create a transparent and reliable relationship with their users. As the Salesforce ecosystem continues to expand, the ability to automate these processes and enforce compliance at the platform level will become a critical differentiator. Partners who adopt these tools can build more scalable, resilient businesses that are better positioned to meet the diverse and evolving demands of the modern enterprise.
For those looking to transition to this model, the pathway involves defining PSLs within the 2GP source code, mapping those licenses to products within the Partner Business Org, and leveraging the capabilities of AgentExchange Commerce to manage the lifecycle of these tiered offerings. By integrating these practices, ISVs can ensure that their business model is as robust and flexible as the technology they provide, creating a sustainable foundation for long-term growth on the Salesforce platform. As the industry moves toward more intelligent and automated ecosystems, this shift in licensing architecture provides the necessary infrastructure to power the next generation of business applications.
