Examkin

Question

Difficulty: MediumPermission Sets and Permission Set Groups

A commercial real estate management firm is configuring Salesforce access control for various user roles and operational scenarios. Match each administrative security requirement on the left with the most appropriate Salesforce permission feature on the right.

  • Grant temporary elevated permissions to an external compliance auditor for a 14-day audit window, ensuring access automatically revokes upon completion.Permission Set Assignment Expiration Date
  • Bundle multiple functional permission sets into a single administrative unit to streamline assignment for Regional Property Managers.Permission Set Group
  • Disable Delete permissions on Lease Contract records for a specific subset of users who are assigned a broader permission set bundle.Muting Permission Set
  • Grant additive read and edit permissions for a custom field to select users across different departments without changing their base profile assignments.Standalone Permission Set

Answer

Temporary access requirements match with Permission Set Assignment Expiration Date. Bundling permission sets matches with Permission Set Group. Restricting specific permissions inside a group matches with Muting Permission Set. Additive custom field access across profiles matches with Standalone Permission Set.
Each administrative requirement corresponds directly to standard Salesforce security tools. Temporary elevated access utilizes Permission Set Assignment Expiration Date. Aggregating multiple permission sets uses Permission Set Groups. Suppressing specific permissions within a group uses Muting Permission Sets. Granting incremental field access across diverse profiles uses Standalone Permission Sets.

Step-by-Step Solution

1
Analyze requirement 1 (temporary elevated access with automatic revocation)
Identify that Salesforce allows setting an expiration date on Permission Set assignments.
Assigning an expiration date automates permission revocation for time-bound projects or audits.
2
Analyze requirement 2 (bundling multiple permission sets for single assignment)
Identify Permission Set Group as the feature designed to aggregate multiple permission sets.
Permission Set Groups simplify user management by consolidating distinct permission sets into one assignable group.
3
Analyze requirement 3 (disabling delete access within a bundled group)
Identify Muting Permission Set as the mechanism to suppress permissions granted inside a Permission Set Group.
Muting Permission Sets allow fine-grained access control by disabling specific permissions within a Permission Set Group without altering individual member permission sets.
4
Analyze requirement 4 (granting additive access to a custom field across profiles)
Identify Standalone Permission Set as the best practice implementation.
Profiles establish baseline access, while Standalone Permission Sets grant additive field-level permissions flexibly across user profiles.

Key Concept

Salesforce Permission Sets, Permission Set Groups, Muting Permission Sets, and Assignment Expirations
Rate this question

Topics

Permission Sets and Permission Set Groups

More questions from this topic