Examkin

Question

Difficulty: MediumPermission Sets and Permission Set Groups

An administrator at Cloud Kicks needs to grant executive assistants access to view custom billing object records and run specialized financial reports. These assistants currently have different standard user profiles depending on their assigned department. The administrator wants to provide this access while minimizing administrative overhead and avoiding unnecessary permission duplication. Which solution should the administrator implement?

  1. Create a single Permission Set containing the billing object view permissions and report permissions, and assign it to the executive assistants.Answer
  2. B
    Clone each department's existing profile, enable the billing and reporting permissions on the new profiles, and reassign the executive assistants.
  3. C
    Modify the Organization-Wide Defaults for the billing object to Public Read/Write so all executive assistants can view the records automatically.
  4. D
    Create a Muting Permission Set that grants billing view access and report execution, then assign it to a new public group containing the assistants.

Answer

Create a single Permission Set containing the required billing object view access and report running permissions, then assign this Permission Set directly to the executive assistants regardless of their underlying profile.
The correct approach uses a single Permission Set to grant the necessary custom object read access and report permissions. Because Permission Sets are additive and profile-independent, an administrator can assign one Permission Set to multiple users regardless of their assigned baseline profile, minimizing administrative effort.

Step-by-Step Solution

1
Analyze the business requirement and user distribution.
Executive assistants are assigned to various department profiles but share a common need for specific object and reporting access.
Profiles establish baseline access, while permission sets expand permissions for users across different profiles.
2
Evaluate permission management options for administrative efficiency.
A single permission set can bundle the necessary object and feature permissions.
Using permission sets prevents profile sprawl and reduces administrative maintenance.
3
Assign the permission set to the target users.
Target assistants receive additive permissions without altering their base profiles or org-wide security.
Permission sets flexibly grant additive access across users with varying profile assignments.

Key Concept

Permission Sets for Additive Access Management
Rate this question

Topics

Permission Sets and Permission Set Groups

More questions from this topic