Examkin

Question

Difficulty: HardPermission Sets and Permission Set Groups

A renewable energy enterprise uses a baseline custom profile for its field service technicians. To support an upcoming compliance audit, the administrator needs to grant ten senior technicians temporary privileges to export custom inspection reports and permanently delete obsolete turbine log records. The administrator must implement this access change without modifying the standard permissions of the remaining field service technicians or creating redundant administrative overhead. Which solution meets these security requirements?

  1. Create a Permission Set containing the Export Reports system permission and Delete object permission for turbine logs, include it in a Permission Set Group, and assign the group to the ten senior technicians.Answer
  2. B
    Clone the baseline technician profile to create a new Senior Technician profile with Export Reports and Delete access, then reassign the ten technicians to the new profile.
  3. C
    Enable Delete object access and Export Reports directly on the baseline technician profile, then assign a Muting Permission Set to all technicians who should not have access.
  4. D
    Change the Organization-Wide Default sharing settings for the turbine log object to Public Read/Write/Transfer, enabling deletion access for senior technicians.

Answer

Create a Permission Set containing the Export Reports system permission and Delete object permission, bundle it into a Permission Set Group, and assign the group to the senior technicians.
Salesforce architecture mandates that profiles should establish baseline access, while Permission Sets and Permission Set Groups should be utilized to grant additive capabilities to subset user groups. Constructing a Permission Set with the required system and object permissions and bundling it within a Permission Set Group cleanely extends access to the ten senior technicians without altering the base profile or creating profile sprawl.

Step-by-Step Solution

1
Analyze the permission requirement for the subset of technicians.
Identify that the requested permissions (Export Reports, Delete) represent additive permissions needed by only 10 out of all technicians.
Profile modifications affect all assigned users, making profile edits unsuitable for targeted access expansion.
2
Evaluate permission assignment tools following security best practices.
Design a Permission Set with the necessary system and object permissions, then aggregate it into a Permission Set Group.
Permission Sets provide flexible additive permissions, while Permission Set Groups allow streamlined assignment and management.
3
Assign the Permission Set Group to target users.
Grant access to the 10 senior technicians without affecting the baseline access of other technicians.
This maintains least privilege access and avoids profile proliferation.

Key Concept

Permission Sets and Permission Set Groups for Additive Access Management
Rate this question

Topics

Permission Sets and Permission Set Groups

More questions from this topic