An administrator at a healthcare organization manages access for care management teams. Full-time care managers currently use a Permission Set Group named "Patient_Care_Group", which bundles three Permission Sets: "Patient Data View", "Clinical Notes Edit", and "Patient Record Delete". The administrator must grant temporary intake specialists access to view patient data and edit clinical notes using the exact same Permission Sets, but company governance strictly forbids intake specialists from deleting patient records. Which two actions should the administrator take to fulfill this requirement while maintaining a scalable access control architecture? (Select 2 answers)
- Create a new Permission Set Group for temporary intake specialists and add the three existing Permission Sets to it.Answer
- Add a Muting Permission Set to the new Permission Set Group that disables the Delete permission on the Patient object.Answer
- CClone the standard user profile to create a custom profile for intake specialists, removing the Delete object permission at the profile level.
- DRemove the "Patient Record Delete" Permission Set from the original Permission Set Group and assign Delete permissions directly on the full-time care managers' profile.
Answer
The administrator should create a new Permission Set Group containing the three existing Permission Sets and add a Muting Permission Set to that group to disable Delete permissions on the Patient object.
To grant access efficiently without duplicating Permission Sets, the administrator should create a dedicated Permission Set Group containing the existing Permission Sets. By adding a Muting Permission Set to this new group, the Delete permission on the Patient object can be muted specifically for users assigned to this group, while leaving the underlying Permission Sets intact for full-time care managers.
Step-by-Step Solution
Key Concept
Permission Set Groups and Muting Permission Sets
Estimated Time:2m 0s