Examkin

Question

Difficulty: MediumRole Hierarchy and Sharing Rules

A System Administrator at Horizon Healthcare is configuring access control for a custom object named Clinical_Trial__c. The Organization-Wide Default (OWD) for Clinical_Trial__c is set to Private.

Management has established the following requirements:
1. Managers and executives positioned above record owners in the role hierarchy must automatically inherit Read and Edit permissions for records owned by their subordinates.
2. Members of the Regulatory Compliance team, who are assigned to the 'Compliance Analyst' role, must be granted Read-Only access to any Clinical_Trial__c record where the Risk_Level__c field is set to 'High', regardless of who owns the record.

Which combination of Salesforce security configurations will meet these requirements?

  1. Ensure 'Grant Access Using Hierarchies' remains enabled for Clinical_Trial__c, and create a criteria-based sharing rule sharing records where Risk_Level__c equals 'High' with the 'Compliance Analyst' role.Answer
  2. B
    Deselect 'Grant Access Using Hierarchies' on Clinical_Trial__c, and create an owner-based sharing rule to share all records owned by subordinates with the executive role.
  3. C
    Create a permission set with 'View All' object permissions for Clinical_Trial__c and assign it to both executive managers and Compliance Analysts.
  4. D
    Set the Organization-Wide Default for Clinical_Trial__c to Public Read-Only, and use Page Layouts to hide non-high-risk records from Compliance Analysts.

Answer

Enable 'Grant Access Using Hierarchies' for Clinical_Trial__c and create a criteria-based sharing rule that shares records where Risk_Level__c equals 'High' with the 'Compliance Analyst' role.
The correct option combines Salesforce's native role hierarchy behavior with targeted criteria-based sharing. Enabling 'Grant Access Using Hierarchies' on the custom object automatically extends record access upward to managers and executives. A criteria-based sharing rule evaluates the field condition (Risk_Level__c = 'High') and grants access to the designated role without granting access to low or medium risk records.

Step-by-Step Solution

1
Evaluate role hierarchy access inheritance requirement
Confirming 'Grant Access Using Hierarchies' is enabled on the custom object ensures users higher in the role hierarchy inherit the record permissions of their subordinates automatically.
For standard objects, hierarchy access is mandatory, but for custom objects, it can be toggled. Keeping it checked satisfies requirement 1.
2
Evaluate conditional access requirement based on record field criteria
Create a criteria-based sharing rule targeting Clinical_Trial__c records where Risk_Level__c = 'High' and share Read-Only access with the 'Compliance Analyst' role.
Criteria-based sharing rules allow access to be granted to specified user groups based on field values without depending on record ownership.

Key Concept

Role Hierarchy Access and Criteria-Based Sharing Rules
Rate this question

Topics

Role Hierarchy and Sharing Rules

More questions from this topic