Question

Difficulty: MediumContent Management and Salesforce Files

An administrator at a consulting firm needs to secure sensitive files stored within Salesforce Content Libraries. The administrator must ensure that team members can view existing library documents, but are prevented from uploading new file versions into the library and from generating public links to share files with external clients. Which two actions should the administrator perform to enforce these restrictions? (Choose 2 answers)

  1. Assign a Library Role that omits the 'Add Content' permission to team members for the specific content library.Answer
  2. B
    Set the Organization-Wide Default (OWD) sharing setting for the Content Document object to Private.
  3. Disable the 'Create Public Links' user permission on the profiles or permission sets assigned to team members.Answer
  4. D
    Configure Field-Level Security on the ContentVersion object to set the File Expiration field to Read-Only.

Answer

The administrator should assign a Library Role that omits the 'Add Content' permission to team members for the specific library, and disable the 'Create Public Links' permission on the profiles or permission sets assigned to those users.
Content Library privileges are managed through Library Roles, where removing 'Add Content' stops users from uploading files to the library. System-wide permissions like 'Create Public Links' assigned via profiles or permission sets restrict users from generating external download links.

Step-by-Step Solution

1
Determine how content uploading is restricted within Salesforce Content Libraries.
Library access privileges (such as adding content or managing library settings) are controlled by Library Roles assigned to users or groups within that specific library.
Omitting the 'Add Content' permission from the assigned Library Role prevents users from contributing new files or file versions to that library.
2
Determine how public link generation is restricted across Salesforce Files.
The ability to generate public shareable URLs for files is controlled via user profile and permission set system permissions, specifically 'Create Public Links'.
Disabling 'Create Public Links' on the user's profile or assigned permission sets removes their functional permission to share files externally.

Key Concept

Salesforce Content Libraries permissions and Salesforce Files public sharing controls
Rate this question