Question

Difficulty: MediumUser Management and Provisioning

A Salesforce Administrator is tasked with manually provisioning a new Support Specialist who requires baseline system access along with specialized object permissions. In what order should the administrator perform the steps to complete the user provisioning workflow in accordance with Salesforce security best practices?

  1. 1Identify or configure the baseline Profile and supplementary Permission Set required for the role.
  2. 2Populate mandatory user record fields, including Name, Email, Username, and select the appropriate User License.
  3. 3Assign the baseline Profile to the user record on the creation screen.
  4. 4Save the user record to establish the account and generate the unique User ID.
  5. 5Assign the supplementary Permission Set to the saved user record.

Answer

The correct administrative sequence is to first prepare the Profile and Permission Set, populate required identity details and select the license, assign the baseline Profile, save the user record, and finally assign the supplementary Permission Set to the created user.
The proper provision sequence starts with verifying security containers, followed by entering mandatory user attributes and assigning a baseline Profile on the creation layout. Saving the user record commits it to the database and generates a User ID, which is a prerequisite for assigning additional Permission Sets.

Step-by-Step Solution

1
Determine access control components
Baseline profile and permission set requirements are verified
Before initiating user creation, the administrator must confirm that the required access control structures exist.
2
Enter user details and license type
Mandatory identity attributes are entered on the User New page
Salesforce mandates fields such as Last Name, Alias, Email, Username, and User License before record creation.
3
Select baseline profile
Profile is associated with the draft user record
Each user must have a single profile assigned during initial creation to define baseline permissions.
4
Save the user record
User account is generated in Salesforce with an active User ID
Saving instantiates the user record in the database, allowing secondary access assignments.
5
Assign supplementary permission set
Additional object and field permissions are granted to the user
Permission Sets are assigned to active User IDs via the Permission Set Assignments related list or manager after user creation.

Key Concept

User Provisioning Workflow and Permission Hierarchy
Rate this question