Examkin

Question

Difficulty: MediumPermission Sets and Permission Set Groups

An administrator at Universal Containers needs to grant a small group of five sales operations users the ability to export reports and manage custom object records. The remaining sales reps who share the same base Sales User profile do not require these extra privileges. Which configuration approach should the administrator use to grant the required access?

  1. Create a Permission Set containing the export reports and custom object permissions, then assign it to the five sales operations users.Answer
  2. B
    Create a new custom Profile with the required permissions enabled and reassign the five sales operations users to this profile.
  3. C
    Modify the standard Sales User Profile to enable the required permissions for all users assigned to the profile.
  4. D
    Create a Muting Permission Set with the required permissions enabled and assign it directly to the five sales operations users.

Answer

Create a Permission Set containing the export reports and custom object permissions, then assign it to the five sales operations users.
Permission Sets provide an additive security model in Salesforce. When a subset of users sharing a profile requires extra permissions, creating and assigning a Permission Set grants those specific permissions without changing base profiles or affecting other users.

Step-by-Step Solution

1
Analyze the access requirement context
Identified that only a subset of users (5 sales ops users) on a shared profile require additional permissions.
Base profiles define baseline access for all assigned users, so modifying the profile affects everyone.
2
Evaluate permission assignment tools in Salesforce
Determined that additive access for specific individuals should be managed via Permission Sets rather than creating redundant profiles.
Permission Sets allow flexible, incremental permission assignment without profile sprawl.
3
Select the correct administrative approach
Create a Permission Set with the necessary permissions and assign it to the targeted users.
This maintains the least privilege model and adheres to Salesforce architecture best practices.

Key Concept

Additive permissions via Permission Sets versus profile-based access management
Rate this question

Topics

Permission Sets and Permission Set Groups

More questions from this topic