Match each Salesforce security and access control requirement on the left with the correct Permission Set feature or architecture component on the right.
- Grant elevated 'Modify All' access on Account records to a third-party auditor, ensuring access is automatically revoked after 30 days without manual intervention.Permission Set Assignment Expiration
- Combine individual permission sets for 'Create Custom Reports', 'Export Reports', and 'Manage Dashboards' into a single reusable container to streamline user provisioning for sales directors.Permission Set Group
- Explicitly remove the 'Delete' permission on Contracts for contractor users who are assigned a broader administrative bundle that grants Contract deletion capabilities.Muting Permission Set
- Require users to establish an active, authenticated session (such as via a Flow or web callout) before administrative permissions are temporarily enabled.Session-Based Permission Set
Answer
1. Granting temporary access with auto-revocation matches Permission Set Assignment Expiration. 2. Combining multiple permission sets into a reusable container matches Permission Set Group. 3. Explicitly suppressing permissions within a group matches Muting Permission Set. 4. Activating permissions dynamically based on an authenticated user session matches Session-Based Permission Set.
Each access control requirement directly corresponds to a specific native feature of Salesforce permission architecture: temporary time-bound assignments utilize Expiration Dates; permission bundling uses Permission Set Groups; permission suppression within groups uses Muting Permission Sets; and condition/session-triggered access relies on Session-Based Permission Sets.
Step-by-Step Solution
Key Concept
Salesforce Permission Set Architecture and Advanced Access Control