Examkin

Question

Difficulty: EasyDelegated Administration

A Salesforce administrator needs to allow a Support Operations Team Lead to reset passwords and unlock account access for team members within their department, without giving the lead full System Administrator access or access to other departments. Which Salesforce capability should the administrator configure to meet this requirement?

  1. Delegated AdministrationAnswer
  2. B
    Permission Set with the Manage Users system permission
  3. C
    User Account Freezing Settings
  4. D
    Organization-Wide Login IP Ranges

Answer

Delegated Administration
Delegated Administration is designed specifically for decentralizing user administration. It allows non-administrator users to perform specified tasks—such as resetting passwords, unlocking accounts, and managing user details—for users belonging to specified roles and subordinate roles.

Step-by-Step Solution

1
Analyze the administrative privilege requirement
The requirement requests granting password reset and user maintenance abilities restricted to a specific departmental subset of users.
Security controls require scoping administrative rights strictly to the user population managed by the lead.
2
Evaluate Salesforce administrative delegation mechanisms
Delegated Administration groups allow system administrators to specify delegated administrators, target roles/subordinates, and allowed profiles.
This provides localized user administration capabilities without granting organization-wide administrative access.

Key Concept

Delegated Administration allows system administrators to decentralize user management by granting non-administrator users permission to perform administrative tasks (such as resetting passwords and editing users) for specified roles.
Rate this question

Topics

Delegated Administration

More questions from this topic