A logistics enterprise relies on a single baseline profile for all 50 warehouse dispatchers. The administrator needs to grant two senior dispatchers elevated access to export freight records and edit the restricted 'Customs Priority' field on the Freight Manifest custom object, without expanding access for the remaining dispatchers. Which two administrative actions should be taken to meet this requirement following Salesforce security best practices? (Select 2 answers)
- Create a permission set granting the Export Reports system permission and Edit access to the Customs Priority field, then assign it to the two senior dispatchers.Answer
- Keep all dispatchers assigned to their existing baseline profile to preserve organizational least privilege principles.Answer
- CClone the standard warehouse dispatcher profile, enable the export and field-level permissions on the cloned profile, and reassign the senior dispatchers to it.
- DEnable the Export Reports permission and Customs Priority Edit access directly on the baseline dispatcher profile to maintain a single profile configuration.
Answer
The administrator should create a permission set with the required export and field-level edit permissions for assignment to the two senior dispatchers, while keeping all dispatchers on their standard baseline profile.
The combination of creating a permission set for the specific elevated permissions and leaving all users on their baseline profile adheres to Salesforce best practices. Permission sets allow administrators to extend functionality to specific users on a case-by-case basis while maintaining clean, maintainable profiles.
Step-by-Step Solution
Key Concept
Additive permissions via Permission Sets versus profile maintenance