Examkin

Question

Difficulty: MediumPermission Sets and Permission Set Groups

A pharmaceutical company needs to grant temporary Read and Edit access to the custom Clinical Trial object for five quality assurance specialists. These five specialists are assigned to different baseline profiles across various departments. Once the three-month clinical trial audit concludes, their elevated access must automatically cease without altering the access rights of other users who share their base profiles. Which TWO configuration steps should the administrator implement to meet these requirements efficiently? (Select 2)

  1. Create a permission set that grants Read and Edit access to the Clinical Trial object and assign it to the five quality assurance specialists.Answer
  2. B
    Clone the baseline profiles for each department, enable Read and Edit permissions on the Clinical Trial object, and reassign the five specialists to the new profiles.
  3. Specify an expiration date on the permission set assignment for each of the five specialists corresponding to the end of the audit.Answer
  4. D
    Update the Organization-Wide Defaults for the Clinical Trial object to Public Read/Write for the duration of the audit period.

Answer

The administrator should create a permission set granting Read and Edit permissions on the Clinical Trial object for the specialists, and set an expiration date on those permission set assignments to ensure access automatically ends after the three-month audit.
Permission sets provide additive permissions to specific users without altering base profiles shared by other users. Combining a permission set with assignment expiration dates handles temporary access requirements cleanly by automatically removing elevated permissions when the specified date is reached.

Step-by-Step Solution

1
Identify the proper access mechanism for additive, cross-profile permissions.
Determine that a permission set is required rather than modifying or cloning existing user profiles.
Profiles establish baseline access for job roles, whereas permission sets grant flexible additive permissions to selective users regardless of their profile.
2
Address the temporary nature of the audit access requirement.
Use permission set assignment expiration dates.
Setting an expiration date during assignment automates access revocation upon audit completion, eliminating manual administrative cleanup.

Key Concept

Permission Sets and Permission Set Assignment Expiration
Rate this question

Topics

Permission Sets and Permission Set Groups

More questions from this topic