BrightPath Education tracks sensitive instructor details using a custom field named SSN__c on the Instructor__c object. Academic Advisors and Human Resources representatives currently share the same custom profile. The administrator needs to ensure HR representatives have Read and Edit access to SSN__c, while Academic Advisors cannot view or edit this field in the UI, reports, or API. Which two configuration steps should the administrator take to fulfill this requirement? (Choose 2 answers)
- Set Field-Level Security for SSN__c on the shared custom profile to restrict Read and Edit access for all users assigned to that profile.Answer
- Create a permission set that grants Read and Edit access to SSN__c and assign it specifically to the Human Resources representatives.Answer
- CUse Dynamic Forms to set component visibility on the Instructor__c Lightning Record Page to hide SSN__c from Academic Advisors.
- DClone the shared profile to create a new profile with SSN__c access removed and reassign the Academic Advisors to the new profile.
Answer
The administrator should restrict Field-Level Security on the shared profile to remove Read/Edit access for all users, and then create a permission set granting Read/Edit access to the field and assign it to the Human Resources representatives.
To grant field access to a subset of users sharing a profile, best practice dictates revoking access to the field on the baseline profile via Field-Level Security (FLS) and using a permission set to grant additive Read and Edit permissions to the specific users who need access.
Step-by-Step Solution
Key Concept
Field-Level Security (FLS) restriction on profiles combined with additive access via Permission Sets