Examkin

Question

Difficulty: MediumPermission Sets and Permission Set Groups

A renewable energy company has 40 field technicians who all share the 'Standard Field Tech' profile. The administrator needs to grant two lead technicians temporary Read and Edit access to a custom object named 'Substation Maintenance' for a 60-day project. The remaining 38 technicians should not be able to view or edit this object. Which administrative approach meets this requirement while adhering to Salesforce security best practices?

  1. Create a Permission Set with Read and Edit permissions on the 'Substation Maintenance' object, assign it to the two lead technicians, and configure a permission set assignment expiration date of 60 days.Answer
  2. B
    Clone the 'Standard Field Tech' profile to create a 'Lead Field Tech' profile with Read and Edit access on 'Substation Maintenance', and reassign the two lead technicians to the new profile.
  3. C
    Modify the baseline 'Standard Field Tech' profile to grant Read and Edit access on 'Substation Maintenance', then create a Muting Permission Set to restrict access for the other 38 technicians.
  4. D
    Edit the 'Standard Field Tech' profile setting to enable a temporary permission override for the two lead technician user accounts.

Answer

Create a Permission Set with Read and Edit permissions on the 'Substation Maintenance' object, assign it to the two lead technicians, and configure a permission set assignment expiration date of 60 days.
The correct solution uses a Permission Set to grant object-level Read and Edit permissions specifically to the two lead technicians. By utilizing permission set assignment expiration, access automatically revokes after 60 days, satisfying least privilege and avoiding profile duplication.

Step-by-Step Solution

1
Identify the baseline profile vs. additive permission requirements.
Since 38 out of 40 users should retain standard access while only 2 require extra permissions, access must be granted additively rather than altering the baseline profile.
Profiles define base access for job functions, whereas permission sets grant incremental permissions to specific users.
2
Determine the optimal mechanism for temporary additive access.
Create a Permission Set granting Read and Edit access on the custom object.
Permission Sets allow clean management of object permissions without cloning or proliferating profiles.
3
Configure the assignment duration constraint.
Set an expiration date of 60 days on the Permission Set assignment for the two lead technicians.
Salesforce supports built-in permission set assignment expiration dates, eliminating manual overhead after the project ends.

Key Concept

Additive Permissions via Permission Sets with Expiration
Rate this question

Topics

Permission Sets and Permission Set Groups

More questions from this topic