The first thing you will see is a list of any existing permission sets.
Each line will display the name of the set and some other information such as the number of accounts it is assigned to and the number of resources assigned to it - clicking on either will take you to a list of those accounts or resources. Clicking on the permission set name will allow you to edit the sets details (see below).
After clicking on the add button you will be prompted for a description and name for your new permission set:
The name is automatically generated based on the description, but you can change it if you wish. The name appears in data downloads and the audit report. It is also used in bulk uploads. Permission set names, like account username, cannot be modified once created.
If you click the name of a permission set, you can modify it.
The sidebar shows you the description, name, creation time and modification time of the permission set
From the allocated to accounts button on either the permission set in the list or on the modify page you will be taken to a preset search for accounts that have that permission set. From here you have access to all the same actions as any other search including allocate and revoke permission sets. Allocating this permission set to accounts though is done from any other search or list view that identifies the accounts that should have this set.
From the allocated to accounts button on either the permission set in the list or on the modify page you will be taken to a filtered view of the allocated tab in the resource catalogue. This view will let you easily remove resources from the permission set. You can also add others from the 'All' tab, but you will find it easier to use the Add button (see below).
This view usefully also allows you to allocate resources to other permission sets which can help with the management of resources - you might even create some permission sets that you never allocated to accounts for this reason.
This will bring up a list of all the resources that are not already allocated to this permission set - add them to the set by clicking on the add buttons on the relevant resources.
You can also allocate resources to a permission set directly from the catalogue.
Anything to watch out for?
Whilst all accounts will need a permission set so that they can access resources, restricting access to the resources specified in a permission set requires restrictive mode be set to on.