A wealth advisory firm uses a custom object named Investment_Portfolio__c to track high-net-worth client asset allocations. The company's security policy mandates that portfolio advisors should only view and edit portfolios they personally own. However, regional directors above those advisors in the role hierarchy must automatically inherit full view and edit access to all portfolios owned by their direct and indirect subordinates. Peer advisors in different branches must have no access to each other's portfolio records. Which TWO configurations must the administrator implement to establish this baseline access model? (Select TWO)
- Set the Default Internal Access for the Investment_Portfolio__c object to Private.Answer
- Ensure the Grant Access Using Hierarchies setting remains selected for the Investment_Portfolio__c object.Answer
- CSet the Default Internal Access to Public Read-Only and assign custom profiles to restrict record access between peer advisors.
- DDeselect the Grant Access Using Hierarchies checkbox on the Investment_Portfolio__c object and use permission sets to grant manager access.
Answer
To enforce the required security model, the administrator must set the Default Internal Access for Investment_Portfolio__c to Private and ensure that Grant Access Using Hierarchies is checked.
Setting the Default Internal Access to Private ensures that record access is restricted to record owners by default. Keeping Grant Access Using Hierarchies enabled ensures that managers situated higher in the role hierarchy automatically inherit access to records owned by their subordinates.
Step-by-Step Solution
Key Concept
Organization-Wide Defaults (OWD) and Role Hierarchy Record Access