Examkin

Question

Difficulty: MediumOrganization-Wide Defaults (OWD)

An IT consulting firm tracks sensitive client risk assessments using a custom object named Security_Audit__c. Management requires that standard users can only view and edit records that they own. However, managers must automatically retain full access to records owned by their direct and indirect subordinates in the role hierarchy. Which two configuration steps must the Salesforce administrator take to enforce these security requirements?

  1. Set the Organization-Wide Default (OWD) for the Security_Audit__c object to Private.Answer
  2. B
    Modify user profiles to remove Read access on the Security_Audit__c object for non-record owners.
  3. Keep the Grant Access Using Hierarchies option selected for the Security_Audit__c object.Answer
  4. D
    Deselect the Grant Access Using Hierarchies setting on Security_Audit__c to prevent lateral record sharing.

Answer

Set the Organization-Wide Default (OWD) for the Security_Audit__c object to Private and keep the Grant Access Using Hierarchies option selected for the object.
Setting the Organization-Wide Default (OWD) to Private sets the baseline security so users can only access records they own. Keeping Grant Access Using Hierarchies enabled ensures that managerial users automatically receive access to records owned by their subordinates in the role hierarchy.

Step-by-Step Solution

1
Determine the baseline access requirement for standard users.
Since standard users should only view and edit their own records, the Organization-Wide Default (OWD) for Security_Audit__c must be set to Private.
Organization-Wide Defaults define the most restrictive baseline access level for records an employee does not own.
2
Determine how managers should access subordinates' records.
Ensure that the Grant Access Using Hierarchies setting remains checked on the custom object.
When enabled, Grant Access Using Hierarchies automatically grants record access to users positioned above the record owner in the role hierarchy.

Key Concept

Organization-Wide Defaults (OWD) and Role Hierarchy Access Propagation
Rate this question

Topics

Organization-Wide Defaults (OWD)

More questions from this topic