Question

Difficulty: MediumPermission Sets and Permission Set Groups

A Salesforce administrator is designing a security architecture that adheres to the principle of least privilege while maintaining scalability. Match each business access requirement on the left with the most appropriate Salesforce permission component or mechanism on the right.

  • Granting an extra additive permission (such as Export Reports) to a small team of support reps without modifying their underlying profile.Standalone Permission Set
  • Bundling multiple permission sets together to streamline assignment for users who perform the sales executive job function.Permission Set Group
  • Disabling a single permission (such as Delete on Contracts) for a subset of users within a combined job-role permission group.Muting Permission Set
  • Granting special system access to a contractor that automatically terminates after a 60-day audit window.Permission Set Assignment with Expiration Date

Answer

1. Granting additive permissions without profile modification matches Standalone Permission Set. 2. Bundling multiple permission sets for job functions matches Permission Set Group. 3. Disabling a specific permission within a group matches Muting Permission Set. 4. Granting temporary access that automatically terminates matches Permission Set Assignment with Expiration Date.
Each business scenario matches its optimal Salesforce security feature: standalone permission sets provide additive permissions; permission set groups consolidate permissions by job function; muting permission sets selectively disable inherited group permissions; and assignment expiration dates ensure time-bound access automatically terminates.

Step-by-Step Solution

1
Analyze additive access needs
Identify that granting specific additional permissions to selected users without altering baseline profiles is solved by creating a Standalone Permission Set.
Profiles establish baseline access; permission sets grant additional capabilities cleanly.
2
Analyze persona and group management requirements
Identify that grouping multiple related permission sets for job functions aligns with Permission Set Groups.
Permission Set Groups consolidate multiple permission sets into one easily assignable bundle.
3
Analyze permission restrictions within bundled groups
Identify that suppressing specific permissions in a Permission Set Group requires a Muting Permission Set.
Muting Permission Sets selectively disable permissions granted by other sets within the group without breaking the core sets.
4
Analyze time-bound access requirements
Identify that setting an automatic expiration date on a permission assignment fulfills temporary audit access requirements.
User User Permission Set / Permission Set Group assignments support native expiration dates for automatic offboarding.

Key Concept

Permission Set Architecture and Muting Functionality
Rate this question