Examkin

Question

Difficulty: EasyPermission Sets and Permission Set Groups

A regional manager at a logistics firm requires the 'Export Reports' permission to perform a one-time quarterly audit. This access is not granted by their current profile, and other employees assigned to the same profile should not receive this permission. Which administrative action should be taken to grant this user the required permission?

  1. Create a permission set with the Export Reports permission enabled and assign it to the regional manager.Answer
  2. B
    Create a new custom profile with the Export Reports permission enabled and reassign the regional manager to this profile.
  3. C
    Edit the regional manager's existing profile to enable the Export Reports permission.
  4. D
    Clone the System Administrator profile and assign it to the regional manager for the duration of the audit.

Answer

Create a permission set with the Export Reports permission enabled and assign it to the user.
Permission sets are designed to grant additive permissions to individual users without affecting baseline access settings of other users assigned to the same profile. This adheres to Salesforce security best practices.

Step-by-Step Solution

1
Analyze access requirements
A single user needs an additional permission that should not be shared by other users sharing the same profile.
Profiles govern baseline access across groups of users, whereas Permission Sets grant additive access to specific individuals.
2
Determine the administrative mechanism
Use a Permission Set rather than modifying or creating profiles.
Permission sets allow administrators to grant incremental permissions cleanly without modifying profile assignments.

Key Concept

Additive Access with Permission Sets
Rate this question

Topics

Permission Sets and Permission Set Groups

More questions from this topic