Examkin

Question

Difficulty: MediumDelegated Administration

An administrator at Horizon Logistics adds a regional helpdesk lead to a Delegated Administration group configured to manage users in the 'EMEA Support' role hierarchy. The helpdesk lead needs to immediately restrict system access for an employee in the 'EMEA Support' role following a credential compromise. However, this employee is currently designated as the default case owner for incoming support requests. Which action can the delegated administrator take to immediately block access without breaking system configuration dependencies?

  1. Freeze the user account directly from the user detail page.Answer
  2. B
    Deactivate the user account directly from the user detail page.
  3. C
    Create a temporary custom profile with restricted login permissions and reassign the user.
  4. D
    Modify the Network Access settings to remove the user's IP range.

Answer

Freezing the user account directly from the user detail page is the correct action to immediately prevent login access while retaining record ownership and setup configuration dependencies.
Delegated administrators with user management permissions over a role hierarchy can freeze user accounts in those roles. Freezing immediately prevents user login without removing the user from default case ownership settings or active workflows.

Step-by-Step Solution

1
Identify the immediate requirement and system constraints.
The goal is to stop user login immediately for an employee who is set as a default owner in Case automation.
Deactivating a user assigned to automated process defaults (like default case owner) requires reassigning those processes first.
2
Evaluate administrative permissions granted to a Delegated Administrator.
Delegated administrators can freeze accounts of users in specified roles, but cannot alter org-wide security parameters or build new profiles.
Delegated administration scope is strictly limited to specified roles, profiles, and delegated tasks.
3
Select the capability that meets both security and operational needs.
Freezing the account blocks user authentication while leaving the account active for system setup dependencies.
User freezing was designed specifically to revoke access immediately when deactivation cannot be completed straight away due to system references.

Key Concept

Delegated User Management and User Freezing capabilities
Estimated Time:1m 30s
Rate this question

Topics

Delegated Administration

More questions from this topic