Cloud Kicks tracks sensitive executive compensation details using a custom object named Vendor_Payment__c. Management mandates that individual finance specialists should only see the payment records they own. Furthermore, executive managers above these specialists in the role hierarchy must be prevented from automatically gaining access to these payment records unless explicitly shared. Which security configuration should the administrator implement to fulfill this requirement?
- Set the Organization-Wide Default for Vendor_Payment__c to Private and uncheck the Grant Access Using Hierarchies setting.Answer
- BSet the Organization-Wide Default for Vendor_Payment__c to Private and assign a Permission Set to executive managers that revokes Read access.
- CSet the Organization-Wide Default for Vendor_Payment__c to Private and leave Grant Access Using Hierarchies checked, since role hierarchies only apply to standard objects.
- DSet the Organization-Wide Default for Vendor_Payment__c to Public Read-Only and restrict executive profiles using Object Permissions.
Answer
Set the Organization-Wide Default for Vendor_Payment__c to Private and uncheck the Grant Access Using Hierarchies setting.
The correct configuration requires setting the Organization-Wide Default (OWD) for the custom object to Private so that users only have access to records they own. Additionally, deselecting 'Grant Access Using Hierarchies' prevents users higher in the role hierarchy from automatically gaining access to records owned by subordinates.
Step-by-Step Solution
Key Concept
Organization-Wide Defaults and Grant Access Using Hierarchies for Custom Objects