Examkin

Question

Difficulty: Very hardPermission Sets and Permission Set Groups

Match each complex administrative access requirement to the appropriate Salesforce security configuration mechanism.

  • Grant a temporary 30-day window for a financial analyst to execute mass data export and delete invoice records during a fiscal audit without altering their base profile.Assign a standalone Permission Set configured with an Expiration Date.
  • Suppress the 'Delete' permission on standard Account records for a specific subset of service agents who are assigned to a comprehensive Tier 2 Support permissions bundle.Include a Muting Permission Set within the assigned Permission Set Group.
  • Combine disparate permission sets for API integration access, custom report creation, and object management into a single assignable package for expedited user onboarding.Create and assign a Permission Set Group bundling the individual permission sets.
  • Provide Read and Edit access to sensitive executive compensation custom fields exclusively for three HR managers whose baseline profile restricts field visibility.Assign a dedicated standalone Permission Set with Field-Level Security enabled.

Answer

Matching pairs: 1 matches with assigning a standalone Permission Set configured with an Expiration Date; 2 matches with including a Muting Permission Set within the assigned Permission Set Group; 3 matches with creating and assigning a Permission Set Group bundling the individual permission sets; 4 matches with assigning a dedicated standalone Permission Set with Field-Level Security enabled.
Each administrative scenario aligns precisely with Salesforce security capabilities: temporary access utilizes Permission Set Expiration; selective permission suppression within bundled access utilizes Muting Permission Sets; permission consolidation utilizes Permission Set Groups; and targeted field visibility utilizes standalone Permission Sets with Field-Level Security.

Step-by-Step Solution

1
Evaluate the requirement for temporary elevated permissions (mass export and deletion) during an audit window.
Match with a standalone Permission Set configured with an Expiration Date.
Salesforce allows setting expiration dates on direct permission set assignments, ensuring automatic permission revocation without manual administrative intervention.
2
Evaluate the requirement to selectively disable Account delete capabilities within a bundled set of permissions.
Match with adding a Muting Permission Set inside the Permission Set Group.
Permission sets are strictly additive. The only supported mechanism to suppress or mute permissions within a Permission Set Group is by configuring a Muting Permission Set.
3
Evaluate the requirement to consolidate multiple discrete permission sets into one assignment container for user onboarding.
Match with creating a Permission Set Group.
Permission Set Groups organize related permission sets into a unified bundle, simplifying user provisioning while maintaining component modularity.
4
Evaluate the requirement to grant sensitive field-level visibility exclusively to a select group of HR managers.
Match with assigning a dedicated standalone Permission Set with Field-Level Security.
Profiles set baseline field security; granting selective field access to specific users requires additive Field-Level Security configured in a dedicated Permission Set.

Key Concept

Configuring Permission Sets, Permission Set Groups, Expiration Dates, and Muting Permission Sets to fulfill complex, additive, and selective access requirements.
Rate this question

Topics

Permission Sets and Permission Set Groups

More questions from this topic