Examkin

Question

Difficulty: HardPermission Sets and Permission Set Groups

A Salesforce administrator is designing a scalable permission architecture to meet strict security and administrative guidelines across multiple departments. Match each business requirement with the most appropriate permission structure or mechanism.

  • Granting an external auditor temporary 'Modify All' access on the Account object for a specified 30-day compliance window without altering baseline profile settings.Permission Set Assignment with an Expiration Date
  • Bundling multiple functional access packages for executive users while explicitly turning off the 'Export Reports' permission granted by one of the aggregated packages.Permission Set Group containing a Muting Permission Set
  • Restricting elevated system permissions so they are active only when a user explicitly authenticates via multi-factor authentication during an active browser session.Session-Based Permission Set
  • Providing specialized Read and Edit access to custom financial fields across users who belong to four different standard baseline profiles.Standalone Additive Permission Set

Answer

Each business requirement maps to its optimal Salesforce permission mechanism: Temporary compliance audit access pairs with Permission Set Assignment with an Expiration Date; aggregated access with muted report export capabilities pairs with Permission Set Group containing a Muting Permission Set; conditional session-dependent access pairs with Session-Based Permission Set; and cross-profile custom field access pairs with Standalone Additive Permission Set.
The correct pairings align business scenarios with Salesforce administrative capabilities: temporary access utilizes expiration dates on assignments; permission aggregation with selective permission removal utilizes Permission Set Groups with Muting Permission Sets; session-dependent access uses Session-Based Permission Sets; and cross-profile field additions utilize standard additive Permission Sets.

Step-by-Step Solution

1
Analyze time-bound elevated access requirement
Identified requirement for temporary 30-day access
Salesforce permits setting expiration dates directly on User Permission Set Assignments to automatically revoke temporary elevated privileges.
2
Evaluate consolidated access with explicit permission restrictions
Identified permission set consolidation with a negative override (muting)
Permission Set Groups allow bundling multiple permission sets, while Muting Permission Sets provide the ability to remove specific permissions within the group context.
3
Analyze authentication-driven session requirements
Identified requirement for session-scoped permissions
Session-Based Permission Sets enforce that permissions are dynamically granted only during active user sessions meeting specific criteria.
4
Analyze cross-profile additive field access
Identified standard additive permission set usage
Profiles should serve as baseline access, while standalone permission sets grant flexible additive permissions across disparate user profiles.

Key Concept

Permission Architecture & Advanced Grouping Capabilities
Estimated Time:2m 0s
Rate this question

Topics

Permission Sets and Permission Set Groups

More questions from this topic