A system administrator at a financial services firm needs to configure access controls using Salesforce security features. Match each specific access control requirement to the appropriate permission management mechanism.
- Granting specialized access to a custom Compliance Audit object for a duration of 14 days without modifying user profile assignments.Permission Set with an Expiration Date
- Bundling multiple permission sets together for sales managers while explicitly restricting Delete access on Opportunity records for a subset of those managers.Permission Set Group containing a Muting Permission Set
- Combining standard sales and service permissions into a single reusable package to simplify assignment for cross-functional support agents.Permission Set Group containing multiple baseline Permission Sets
Answer
Temporary access without profile changes maps to a Permission Set with an Expiration Date. Aggregating permissions while selectively turning off delete access maps to a Permission Set Group containing a Muting Permission Set. Consolidating baseline access across job functions maps to a Permission Set Group containing multiple baseline Permission Sets.
Matching temporary access to expiring permission set assignments, selective permission revocation to muting permission sets within groups, and multi-set consolidation to permission set groups accurately follows Salesforce administration security standards.
Step-by-Step Solution
Key Concept
Permission Sets, Permission Set Groups, Expiration Dates, and Muting Permission Sets