An administrator needs to configure record access for a custom object named Project_Milestone__c. The business requirement specifies that users should only be able to view and edit milestone records they own, while managers above them in the role hierarchy should automatically retain access to those records. Which TWO settings must the administrator configure?
- Set the Organization-Wide Default (OWD) for Project_Milestone__c to Private.Answer
- Ensure the Grant Access Using Hierarchies checkbox is selected for Project_Milestone__c.Answer
- CCreate a permission set to restrict read and edit access for users who do not own the record.
- DDeselect the Grant Access Using Hierarchies checkbox on user profiles.
Answer
The administrator must set the Organization-Wide Default for Project_Milestone__c to Private and ensure that Grant Access Using Hierarchies is selected.
Setting the Organization-Wide Default to Private establishes the most restrictive baseline access where users only view records they own. Keeping Grant Access Using Hierarchies enabled ensures managers automatically inherit access to records owned by their subordinates.
Step-by-Step Solution
Key Concept
Organization-Wide Defaults baseline security and role hierarchy access propagation
Estimated Time:1m 0s