Examkin

Question

Difficulty: EasyPermission Sets and Permission Set Groups

A system administrator at an event management company needs to grant access to a custom object named 'Vendor Contracts' to two newly hired event coordinators. None of the other users sharing the same baseline profile require access to this object. What is the Salesforce recommended best practice to grant access to these two users?

  1. Create a permission set granting access to the Vendor Contracts object and assign it to the two event coordinators.Answer
  2. B
    Clone the existing baseline profile, enable access to the Vendor Contracts object, and reassign the two event coordinators to the new profile.
  3. C
    Modify the Organization-Wide Default sharing setting of the Vendor Contracts object to Public Read/Write for all users.
  4. D
    Modify the user records of the event coordinators to grant delegated administrative rights over the Vendor Contracts object.

Answer

Create a permission set granting access to the Vendor Contracts object and assign it to the two event coordinators.
Permission sets are the recommended mechanism in Salesforce to grant additional object, field, or system permissions to specific users without modifying their assigned profiles or affecting other users sharing that profile.

Step-by-Step Solution

1
Identify the access requirement
Two specific users need additive object access that other users on the same profile do not need.
Profiles define baseline access for groups of users, whereas permission sets extend access to individual users.
2
Select the appropriate security mechanism
Create a Permission Set containing the necessary object permissions and assign it to the target users.
Using permission sets follows the principle of least privilege while keeping profile management simplified.

Key Concept

Using Permission Sets for Additive User Permissions
Estimated Time:45s
Rate this question

Topics

Permission Sets and Permission Set Groups

More questions from this topic