A Salesforce administrator is designing a security architecture that adheres to the principle of least privilege while maintaining scalability. Match each business access requirement on the left with the most appropriate Salesforce permission component or mechanism on the right.
- Granting an extra additive permission (such as Export Reports) to a small team of support reps without modifying their underlying profile.Standalone Permission Set
- Bundling multiple permission sets together to streamline assignment for users who perform the sales executive job function.Permission Set Group
- Disabling a single permission (such as Delete on Contracts) for a subset of users within a combined job-role permission group.Muting Permission Set
- Granting special system access to a contractor that automatically terminates after a 60-day audit window.Permission Set Assignment with Expiration Date
Answer
1. Granting additive permissions without profile modification matches Standalone Permission Set. 2. Bundling multiple permission sets for job functions matches Permission Set Group. 3. Disabling a specific permission within a group matches Muting Permission Set. 4. Granting temporary access that automatically terminates matches Permission Set Assignment with Expiration Date.
Each business scenario matches its optimal Salesforce security feature: standalone permission sets provide additive permissions; permission set groups consolidate permissions by job function; muting permission sets selectively disable inherited group permissions; and assignment expiration dates ensure time-bound access automatically terminates.
Step-by-Step Solution
Key Concept
Permission Set Architecture and Muting Functionality