Question

Difficulty: EasyPermission Sets and Permission Set Groups

A system administrator needs to grant a small group of support representatives access to a newly deployed custom object and the ability to export reports. The administrator must grant these extra privileges without altering the baseline profile shared by all support representatives. Which two actions should the administrator perform to achieve this requirement? (Choose 2)

  1. Create permission sets containing the required custom object permissions and export report system permission.Answer
  2. Bundle the permission sets into a Permission Set Group and assign the group to the specific support representatives.Answer
  3. C
    Create a new custom profile with the added permissions and assign it to the support representatives.
  4. D
    Modify the standard support representative profile to enable the custom object and export permissions for all users.

Answer

The administrator should create permission sets containing the required custom object and report export permissions, and bundle these permission sets into a Permission Set Group to assign to the targeted support representatives.
Permission sets are designed to grant additive permissions on top of a user's baseline profile without creating duplicate profiles. Grouping related permission sets into a Permission Set Group allows administrators to assign multiple permission sets as a single unit, streamlining user access management.

Step-by-Step Solution

1
Identify the additive access requirements
Determine that specific users require extra permissions (custom object access and report export) beyond their baseline profile capabilities.
Baseline profiles should maintain minimum necessary access, while extra privileges are added modularly.
2
Create dedicated Permission Sets
Build permission sets that grant the object-level and system-level permissions needed.
Permission sets extend user access without affecting other users on the same profile.
3
Consolidate into a Permission Set Group and assign to users
Combine the permission sets into a single Permission Set Group and assign it to the selected support representatives.
Permission Set Groups organize related permission sets for efficient user assignment and administrative scalability.

Key Concept

Additive Security Architecture with Permission Sets and Permission Set Groups
Rate this question