Examkin

Question

Difficulty: EasyProfiles and Object/Field-Level Security

A Salesforce administrator at Cloud Logistics needs to grant access to view and edit the sensitive Account_Balance__c custom field on the Account object for two specific members of the finance team. Currently, Field-Level Security (FLS) restricts visibility of this field for all users assigned to the Standard User profile. Which two actions should the administrator take to achieve this requirement securely without affecting other Standard User profile members? (Choose 2 answers)

  1. Create a permission set that grants Read and Edit field-level security access to the Account_Balance__c field.Answer
  2. Assign the permission set containing the field access to the two finance team members.Answer
  3. C
    Clone the Standard User profile, enable Read and Edit access for Account_Balance__c on the new profile, and reassign the two finance users to this profile.
  4. D
    Use Dynamic Forms on the Lightning Record Page to display the Account_Balance__c field using component visibility filters based on user names.

Answer

The administrator should create a permission set granting Read and Edit access to the Account_Balance__c field and assign that permission set to the two finance team members.
The correct solution involves creating a permission set that grants Read and Edit Field-Level Security (FLS) for the Account_Balance__c field and assigning that permission set to the two finance team members. In Salesforce, profiles establish baseline access, while permission sets are used to grant additive privileges to specific users without increasing profile management overhead.

Step-by-Step Solution

1
Identify the base security requirement and the scope of users requiring elevated access.
Recognized that only two users out of a larger profile group need access to the Account_Balance__c field.
Profiles define baseline access, whereas additive access for specific individual users should be handled via permission sets.
2
Configure a permission set with the appropriate Field-Level Security.
Created a permission set that enables Read and Edit permissions for Account_Balance__c.
Field-Level Security in permission sets expands visibility for assigned users without modifying profile settings for others.
3
Assign the created permission set to the target finance team members.
The two finance team members gain field access, while all other Standard User profile members remain restricted.
Direct permission set assignment ensures secure, targeted privilege delegation.

Key Concept

Using Permission Sets for Additive Field-Level Security
Estimated Time:1m 0s
Rate this question

Topics

Profiles and Object/Field-Level Security

More questions from this topic