A Salesforce Administrator at Cloud Prism Tech is configuring access for a newly hired compliance auditor who requires temporary read access to custom Financial Audit records and works from a dedicated remote network. The administrator must ensure proper user provisioning while following security and privilege best practices. Which TWO actions should the administrator take? (Select TWO)
- Assign a standard base profile to the user and grant access to the Financial Audit object using a Permission Set.Answer
- Configure Login IP Ranges directly on the user's assigned Profile to restrict or allow access strictly from the remote network location.Answer
- CCreate a new custom profile exclusively for this user to grant the required Financial Audit object permissions.
- DAdd the remote IP address only to Organization-Wide Network Access to override restrictive Profile Login IP Ranges.
Answer
The administrator should assign a standard base profile and grant Financial Audit access using a Permission Set, while configuring Profile Login IP Ranges on the profile to manage network access.
Best practices in Salesforce user provisioning require keeping profiles minimal and broad, while utilizing Permission Sets for specialized or temporary access such as auditing custom objects. Furthermore, network access control at the user profile level is enforced via Profile Login IP Ranges.
Step-by-Step Solution
Key Concept
User Provisioning via Profiles, Permission Sets, and Profile IP Ranges