Examkin

Question

Difficulty: MediumDelegated Administration

Match each delegated administration requirement or operational task with the exact Salesforce group configuration setting required to grant that capability.

  • Permitting delegated administrators to assign specific permission sets to managed usersAdding specified permission sets to the Assignable Permission Sets related list in the Delegated Group
  • Restricting delegated user management privileges to specific regional teamsAdding specific User Roles and Subordinates to the User Administration related list in the Delegated Group
  • Allowing delegated administrators to log in as users within their assigned scopeEnabling 'Administrator Can Log In as Any User' and assigning roles to User Administration in the Delegated Group
  • Granting delegated administrators capability to manage fields and layouts on specific custom objectsAdding target custom objects to the Custom Object Administration related list in the Delegated Group

Answer

Each delegated administration task maps directly to a specific sub-configuration within a Delegated Administration Group: permission set assignments require entry in Assignable Permission Sets; target user scoping requires specifying Roles and Subordinates in User Administration; logging in as managed users requires role assignments combined with enabling administrative login permissions; and custom object administration requires explicitly naming custom objects in Custom Object Administration.
Each administrative capability relies on explicit configuration within Delegated Administration Groups: Assignable Permission Sets governs permission set granting, Roles and Subordinates controls user boundary limits, Organization Login settings paired with user role scoping enables logging in as managed users, and Custom Object Administration grants layout/field administration rights for selected custom objects.

Step-by-Step Solution

1
Analyze the permission set assignment capability requirement.
Recognize that delegated administrators cannot assign arbitrary permission sets across the org; they are strictly restricted to those added under Assignable Permission Sets.
This prevents privilege escalation by ensuring delegated admins cannot grant permissions beyond their specified scope.
2
Determine how user administration boundaries are scoped.
Identify that adding Roles and Subordinates defines the exact target user population delegated admins can manage.
Delegated administration relies on role hierarchy definitions to scope user creation, password resets, and user edits.
3
Evaluate the setup required for logging in as managed users.
Confirm that the org setting 'Administrator Can Log In as Any User' must be active in combination with role assignment in the delegated group.
Delegated login privileges require feature activation at the org level combined with role-scoped authorization.
4
Identify custom object administration setup rules.
Match object schema administration delegation to the Custom Object Administration related list.
Delegated object management is granular and applies only to explicitly specified custom objects, allowing management of custom fields, page layouts, and picklists.

Key Concept

Salesforce Delegated Administration Setup and Scope Limits
Rate this question

Topics

Delegated Administration

More questions from this topic