A Salesforce Administrator at an enterprise organization is tasked with provisioning access for a newly hired Senior Financial Auditor who requires targeted access to confidential audit objects and executive reporting queues. Following security governance and Salesforce administrative best practices, in what order should the administrator execute the user provisioning workflow?
- 1Verify active User License availability under Company Information in Setup.
- 2Configure the base custom Profile establishing minimal organzational object permissions.
- 3Create the User record with required fields including Username, Email, User License, Profile, and Role.
- 4Assign the Financial Audit Permission Set Group to grant elevated system and field-level permissions.
- 5Add the user record to the Executive Audit Public Group to enable criteria-based record sharing rules.
Answer
The correct operational sequence begins with verifying license availability, defining the required base profile, creating the user record with mandatory fields, assigning supplemental permission set groups, and finally adding the active user to the public group for record sharing.
The correct order respects mandatory dependencies in Salesforce user administration: checking license availability precedes account generation; profile creation must occur prior to selection on the user form; user record creation instantiates the account; permission set groups provide targeted privilege expansion; and public group addition enables row-level sharing.
Step-by-Step Solution
Key Concept
Salesforce User Provisioning Lifecycle and Access Layering