Question

Difficulty: EasyPermission Sets and Permission Set Groups

An administrator needs to grant three users in the Sales department the ability to export reports. These users share the same base profile as twenty other sales representatives who do not require export capabilities. Which Salesforce security feature should the administrator use to grant this additional capability?

  1. Create a permission set that enables report exporting and assign it to the three users.Answer
  2. B
    Clone the existing profile, enable report exporting on the new profile, and assign it to the three users.
  3. C
    Edit the shared base profile to enable report exporting for all sales representatives.
  4. D
    Adjust the Organization-Wide Defaults settings to grant report export access through the role hierarchy.

Answer

The administrator should create a permission set with the required export permission and assign it to the three specific users.
Permission sets are used to grant additional permissions to specific users on an ad-hoc basis without changing their underlying profile assignments or affecting other users.

Step-by-Step Solution

1
Analyze the access requirement
Identify that only 3 out of 23 users sharing a profile require an extra privilege.
Profiles determine base permissions for groups of users, whereas selective additive privileges require permission sets.
2
Select the appropriate Salesforce access mechanism
Choose Permission Sets for additive administrative access.
Permission sets extend user functionality without requiring profile proliferation or over-granting access.

Key Concept

Using Permission Sets for Additive Access Management
Rate this question