Examkin

Question

Difficulty: HardUser Management and Provisioning

A Salesforce Administrator needs to manage the complete lifecycle of a specialized sales representative—from initial provisioning with custom permissions to executing an urgent security block and completing formal offboarding. In what order should the Administrator perform the following user management steps in Salesforce Setup?

  1. 1Create a custom Permission Set defining the specialized object and field access requirements.
  2. 2Create the User record, assigning the appropriate User License and baseline Profile.
  3. 3Assign the custom Permission Set to the newly created User record.
  4. 4Freeze the User account upon receiving an alert regarding suspicious login activity.
  5. 5Deactivate the User account following formal offboarding confirmation.

Answer

The correct sequence for managing the user lifecycle is: 1) Create the custom Permission Set, 2) Create the User record with baseline User License and Profile, 3) Assign the custom Permission Set to the User record, 4) Freeze the User account to immediately halt login access during an active security concern, and 5) Deactivate the User account to finalize offboarding and reclaim the user license.
The correct order respects standard administrative sequence and security governance: permission set metadata must be created before assignment, user records require a base profile upon creation, additive access is granted via permission set assignment, security incidents are immediately mitigated by freezing the account, and permanent offboarding concludes with deactivation to recover licenses.

Step-by-Step Solution

1
Build the custom Permission Set in Setup with the required extra privileges.
The permission set container is created and ready for assignment.
Permission sets must exist as organizational metadata before they can be granted to user records.
2
Create the new User record, specifying required fields, User License, and base Profile.
The core user identity is established in the Salesforce instance.
A valid user record with a baseline profile is required before any additional security components can be attached.
3
Assign the custom Permission Set to the user record.
The user gains targeted permissions beyond their default profile capabilities.
Salesforce security best practices advocate for restrictive baseline profiles supplemented by permission sets for specific user role requirements.
4
Freeze the user account when a security alert occurs.
The user is immediately prevented from logging into Salesforce while keeping background user references intact.
Freezing provides an immediate stop-gap for login access during investigations without altering license counts or process dependencies.
5
Deactivate the user account after HR confirms offboarding.
Login capability is permanently disabled and the user license is returned to the active pool.
Deactivation is the standard administrative procedure for completing user offboarding.

Key Concept

Salesforce User Provisioning and Lifecycle Management (Profiles, Permission Sets, Freezing, and Deactivation)
Estimated Time:2m 0s
Rate this question

Topics

User Management and Provisioning

More questions from this topic