Examkin

Question

Difficulty: MediumPermission Sets and Permission Set Groups

An administrator at a renewable energy firm needs to grant 15 Field Engineers access to a custom object named Solar Grid Assets without modifying their baseline profile. Additionally, the administrator must consolidate this new access with several existing operational permissions into a single assignment, while ensuring the extra access automatically expires after 90 days. Which TWO administrative actions should the administrator take to fulfill these requirements? (Choose 2)

  1. Create a Permission Set granting object access to Solar Grid Assets and assign it with an expiration date using Permission Set Expiration.Answer
  2. Combine the new Permission Set with existing operational Permission Sets into a Permission Set Group for streamlined single-assignment management.Answer
  3. C
    Clone the baseline Field Engineer profile, grant access to Solar Grid Assets on the cloned profile, and configure a scheduled flow to revert the profile after 90 days.
  4. D
    Update the Organization-Wide Defaults (OWD) for Solar Grid Assets to Public Read/Write and set an automated deactivation rule on the object settings.

Answer

The administrator should create a Permission Set with the required object permissions and assign it with an expiration date, and consolidate the permission sets into a Permission Set Group for streamlined user assignment.
Permission Sets provide additive permissions for specific users without altering profile definitions, and native user assignment expiration dates handle the 90-day access requirement. Combining Permission Sets into a Permission Set Group enables administrators to manage multiple permission sets as a single bundle for assignment.

Step-by-Step Solution

1
Evaluate the requirement for non-profile additive access and temporary permissions.
Identify that a Permission Set with Permission Set Expiration provides additive object access for a designated time frame without modifying baseline user profiles.
Profiles define base access for entire user groups, while Permission Sets provide flexible, targeted access additions.
2
Evaluate the requirement for managing multiple permission assignments efficiently.
Identify that a Permission Set Group bundles multiple Permission Sets into a single assignable entity.
Permission Set Groups reduce administrative overhead by allowing assignees to receive all required functional permissions in one step.

Key Concept

Permission Sets and Permission Set Groups
Rate this question

Topics

Permission Sets and Permission Set Groups

More questions from this topic