Examkin

Question

Difficulty: MediumPermission Sets and Permission Set Groups

A global telecommunications company uses a single baseline profile named 'Telecom Rep' for its 200 account representatives. A specialized group of 15 representatives requires access to a custom field named 'International Tax ID' on the Account object and access to the 'International Accounts' custom tab. The administrator must grant these additional permissions to only these 15 reps without affecting the baseline profile or creating redundant profiles. Which action should the administrator take to fulfill this requirement following Salesforce security best practices?

  1. Create a Permission Set that grants Read and Edit access to the 'International Tax ID' field and access to the 'International Accounts' tab, then assign it to the 15 representatives.Answer
  2. B
    Clone the 'Telecom Rep' profile into a new 'Enterprise Telecom Rep' profile, enable the required field and tab permissions, and reassign the 15 representatives to the new profile.
  3. C
    Modify the baseline 'Telecom Rep' profile to enable access to the field and tab for all representatives, then use Page Layouts to hide the field from the remaining 185 representatives.
  4. D
    Modify the baseline 'Telecom Rep' profile to enable access to the field and tab, create a Permission Set Group with a Muting Permission Set restricting access, and assign the group to the 185 representatives.

Answer

Create a Permission Set that grants Read and Edit access to the 'International Tax ID' field and access to the 'International Accounts' tab, then assign it to the 15 representatives.
The correct approach is to create a Permission Set granting Read and Edit access to the custom field and access to the custom tab, and assign it to the 15 representatives. Permission sets are designed specifically to extend user permissions additively beyond what their baseline profile allows, keeping profile administration simple and maintainable.

Step-by-Step Solution

1
Analyze the access requirement
Identify that 15 out of 200 users sharing a baseline profile require selective, additive field and object/tab permissions.
Salesforce security architecture relies on profiles for minimum baseline access and permission sets for additive access privileges.
2
Evaluate permission assignment mechanism
Determine that creating a dedicated Permission Set allows the administrator to grant the exact required field-level security and custom tab access to only the target 15 users.
Using permission sets avoids profile proliferation and maintains a clean, scalable security setup.
3
Assign the Permission Set
Assign the new Permission Set to the 15 enterprise representatives while leaving the baseline profile untouched for all 200 reps.
User-level permission set assignment dynamically expands capability without altering profile-wide settings.

Key Concept

Additive Permissions using Permission Sets
Rate this question

Topics

Permission Sets and Permission Set Groups

More questions from this topic