Examkin

Question

Difficulty: MediumPermission Sets and Permission Set Groups

A global aviation maintenance company has 20 Aircraft Fleet Managers assigned to a standard baseline profile named 'Fleet Operations User'. Due to new regulatory guidelines, 4 of these managers need Read and Edit access to a custom object named 'Aircraft Inspection Logs' to record compliance data, while the remaining 16 managers should not have access to this object. Which administrative solution efficiently fulfills this access requirement without granting unnecessary permissions?

  1. Create a Permission Set granting Read and Edit access to the Aircraft Inspection Logs object and assign it to the 4 Fleet Managers who require the access.Answer
  2. B
    Clone the 'Fleet Operations User' profile, enable Read and Edit access on the new profile for Aircraft Inspection Logs, and reassign the 4 Fleet Managers to this new profile.
  3. C
    Modify the baseline 'Fleet Operations User' profile to grant Read and Edit access to Aircraft Inspection Logs, then use sharing rules to restrict access for the remaining 16 managers.
  4. D
    Change the Organization-Wide Defaults (OWD) for Aircraft Inspection Logs to Public Read/Write and assign a Muting Permission Set to the 16 managers.

Answer

Create a Permission Set granting Read and Edit access to the Aircraft Inspection Logs object and assign it to the 4 Fleet Managers who require access.
Permission Sets allow administrators to grant flexible, additive permissions (such as Object-Level Read and Edit access) to individual users or subsets of users without altering their underlying profile or creating new profiles.

Step-by-Step Solution

1
Analyze the access baseline and requirement scope.
All 20 users share a single baseline profile, but only a subset (4 users) requires additional object access.
Salesforce security best practice specifies using profiles for baseline permissions common to all users and Permission Sets for granting additive permissions to subset populations.
2
Evaluate administrative overhead and scalability.
Creating a single Permission Set avoids profile proliferation and avoids granting unintended permissions to the other 16 users.
Modifying or cloning profiles to manage small groups of users creates unnecessary maintenance overhead.

Key Concept

Using Permission Sets to grant additive object permissions to a subset of users sharing a profile
Rate this question

Topics

Permission Sets and Permission Set Groups

More questions from this topic