Examkin

Question

Difficulty: MediumDelegated Administration

ApexCare Health configures a Delegated Administration group to grant a Regional Support Manager administrative privileges over users in the 'US Field Support' role. The setup includes user management rights, password resets, and permission set assignment capabilities. The Regional Support Manager needs to grant extra object permissions to a single user in their delegated role without affecting other team members who share the same profile. Which administrative approach should the Regional Support Manager take within their delegated authority?

  1. Assign an authorized permission set containing the required object permissions directly to the user.Answer
  2. B
    Modify the user's assigned profile to enable the required object access permissions.
  3. C
    Create a new custom profile with the required object permissions and assign it to the user.
  4. D
    Freeze the user account and unfreeze it under a modified profile configuration to update access settings.

Answer

Assign an authorized permission set containing the required object permissions directly to the user.
Delegated administrators are empowered to assign designated permission sets to users within their assigned role hierarchy. Utilizing a permission set grants the necessary object access to the specific user while maintaining the security baseline for all other users assigned to the profile.

Step-by-Step Solution

1
Identify the requirement to grant additive permissions to a specific user without altering permissions for other users sharing the same profile.
Recognize that permission sets must be used for user-specific additive permissions.
Profiles grant baseline permissions to groups of users, whereas permission sets extend access on an individual basis.
2
Evaluate Delegated Administration capabilities regarding user permission management.
Confirm that delegated administrators can assign explicitly specified permission sets to users within their assigned roles.
Delegated group settings define specific permission sets that delegated admins are permitted to assign.
3
Eliminate options requiring profile creation or modification.
Determine that creating or editing profiles is beyond delegated administration scope and impacts broader user groups.
Profile administrative changes require full system administration privileges ('Manage Profiles and Permission Sets').

Key Concept

Delegated Administration Permission Set Assignment and Profile Boundaries
Rate this question

Topics

Delegated Administration

More questions from this topic