Question

Difficulty: HardDashboard Running User and Visibility Settings

An administrator at Apex Financial Consultants is configuring a dynamic dashboard for regional branch managers to track opportunity pipelines. The organization's sharing model for Opportunities is set to Private.

Which TWO statements accurately describe the behavior of dashboard running user settings and security controls in this scenario?

  1. The dashboard displays data to each regional manager based on their own record-level access rights established by Organization-Wide Defaults, role hierarchy, and sharing rules.Answer
  2. Users must be granted permission to the folder storing the dashboard to view it, but folder access alone does not expand their access to underlying record data.Answer
  3. C
    Viewing a dynamic dashboard automatically grants regional managers read access to the underlying opportunity records summarized within the component charts.
  4. D
    Dynamic dashboards can be saved in a user's Personal Dashboards folder while remaining visible to all regional managers in the organization.
  5. E
    Configuring a static running user with administrative access ensures that regional managers will only see data restricted to their own position in the role hierarchy.

Answer

The correct statements are that the dashboard displays data based on each regional manager's own record-level access rights, and that users must have folder access to view the dashboard without folder access expanding their underlying data access.
Dynamic dashboards dynamically evaluate data visibility using the logged-in user's security context, meaning each manager sees metrics tailored to their specific record access. Additionally, access to the folder containing the dashboard is required to open it, but folder access never overrides or expands record-level security.

Step-by-Step Solution

1
Analyze dynamic dashboard running user mechanics under a Private OWD model.
When a dashboard is set to run as the logged-in user (dynamic dashboard), Salesforce evaluates data access dynamically for whoever is viewing the dashboard.
This guarantees that users only see data they are authorized to view according to OWD, role hierarchy, sharing rules, and manual sharing.
2
Evaluate the interaction between folder permissions and data security.
Folder sharing controls who can see or manage the dashboard object, but it does not bypass object-level, field-level, or record-level security settings.
Folder access and record-level sharing operate independently.

Key Concept

Dynamic Dashboard Security and Running User Settings
Estimated Time:2m 0s
Rate this question