Examkin

Question

Difficulty: MediumPermission Sets and Permission Set Groups

A financial services firm needs to grant 15 compliance auditors temporary Read and Edit permissions on a custom object named 'Loan Applications'. The auditors currently share a standard baseline profile with other internal team members who must not have access to this object. What is the recommended administrative approach to grant the required access according to Salesforce security best practices?

  1. Create a permission set that grants Read and Edit access to the Loan Application object, and assign it directly to the 15 compliance auditors.Answer
  2. B
    Modify the existing baseline profile shared by the compliance auditors to enable Read and Edit permissions on the Loan Application object.
  3. C
    Clone the baseline profile, enable Read and Edit access on the Loan Application object within the cloned profile, and reassign the compliance auditors to this new profile.
  4. D
    Change the Organization-Wide Default (OWD) sharing setting of the Loan Application object to Public Read/Write.

Answer

The administrator should create a permission set granting Read and Edit permissions on the Loan Application object and assign it to the 15 compliance auditors.
Salesforce security best practices dictate using profiles to define baseline access and permission sets to extend access to specific users. Creating a permission set for the custom object and assigning it to the auditors grants the necessary permissions without exposing the object to other users on the shared baseline profile.

Step-by-Step Solution

1
Analyze user access requirements
Identified that only a subset of users sharing a profile require extra object-level access.
Modifying a profile affects all users assigned to it, violating the principle of least privilege.
2
Select the appropriate security mechanism
Choose Permission Sets for granting additive permissions.
Permission sets allow flexible, additive permission assignments to individual users independently of their assigned profile.
3
Implement and assign
Create the permission set with object permissions for 'Loan Applications' and assign it to the designated compliance auditors.
This maintains a single streamlined profile architecture while fulfilling specific access requests.

Key Concept

Additive Permissions via Permission Sets
Estimated Time:1m 15s
Rate this question

Topics

Permission Sets and Permission Set Groups

More questions from this topic