Examkin

Question

Difficulty: MediumOrganization-Wide Defaults (OWD)

A commercial real estate company tracks confidential contract negotiations using a custom object named Lease_Agreement__c. Management requires that users only have access to records they own by default, while managers in the role hierarchy automatically inherit access to records owned by their subordinates. Which TWO configuration actions or principles should the administrator apply to establish this baseline access model?

  1. Set the Organization-Wide Default (OWD) for the Lease_Agreement__c object to Private.Answer
  2. Keep the 'Grant Access Using Hierarchies' checkbox selected for the Lease_Agreement__c object.Answer
  3. C
    Modify user profiles to remove 'Read' permissions on Lease_Agreement__c to restrict baseline record-level visibility.
  4. D
    Deselect the 'Grant Access Using Hierarchies' option, as custom objects require sharing rules to grant access to managers.

Answer

The administrator must set the Organization-Wide Default (OWD) to Private for Lease_Agreement__c and keep the 'Grant Access Using Hierarchies' checkbox selected.
Setting the OWD for the custom object to Private ensures that users have no default access to records owned by others. Keeping 'Grant Access Using Hierarchies' enabled allows users above the record owner in the role hierarchy to automatically inherit access to those records.

Step-by-Step Solution

1
Determine the most restrictive baseline access requirement for record visibility.
The requirement states that users should only see their own records by default, which dictates setting the OWD internal access to Private.
Organization-Wide Defaults (OWD) serve as the foundation of record-level security in Salesforce and define the default baseline access level for non-owners.
2
Evaluate role hierarchy requirements for manager record access propagation.
Ensure 'Grant Access Using Hierarchies' remains checked on the custom object configuration.
By default, 'Grant Access Using Hierarchies' is enabled for custom objects, allowing management roles to automatically inherit record access held by lower roles without requiring manual sharing rules.

Key Concept

Organization-Wide Defaults (OWD) establish the baseline record-level access across the organization, while the 'Grant Access Using Hierarchies' setting allows access to automatically propagate up the role hierarchy.
Rate this question

Topics

Organization-Wide Defaults (OWD)

More questions from this topic