Question

Difficulty: MediumPermission Sets and Permission Set Groups

An administrator at a manufacturing company needs to grant three inventory specialists the ability to edit a custom field named 'Safety Inspection Date' on the Asset object. These three specialists are assigned to a baseline profile shared by fifty other warehouse team members who must not be granted access to edit this field. Which administrative action adheres to Salesforce security best practices to meet this requirement?

  1. Create a Permission Set that grants Read and Edit access to the Safety Inspection Date field, and assign it to the three inventory specialists.Answer
  2. B
    Create a new custom Profile with Edit access to the field, and reassign the three inventory specialists to this new Profile.
  3. C
    Modify the existing baseline Profile to grant Edit access to the field, then remove field visibility from page layouts assigned to the remaining fifty team members.
  4. D
    Clone the baseline Profile, grant Edit access to the field in the cloned Profile, and reassign all fifty other warehouse team members to the cloned Profile.

Answer

Create a Permission Set that grants Read and Edit access to the Safety Inspection Date field, and assign it to the three inventory specialists.
The correct approach is to create a Permission Set granting Read and Edit access to the Safety Inspection Date field and assign it directly to the three inventory specialists. In Salesforce, profiles set the minimum baseline permissions, while permission sets are used to grant additive permissions to specific users without modifying their baseline profile or creating redundant profiles.

Step-by-Step Solution

1
Analyze the baseline access requirements and user assignments.
Identified that fifty-three users share the same baseline profile, but only three users need additional field-level edit permissions.
Salesforce security best practices require keeping profiles minimal for broad baseline access and extending privileges additively.
2
Evaluate the mechanism for granting additive permissions.
Determine that a Permission Set allows selective assignment of field-level security (Read and Edit) to specific users without altering profile assignments.
Permission sets grant additive permissions flexibly across users sharing different or identical profiles.
3
Select the correct administrative action.
Creating a Permission Set for the custom field and assigning it to the three specialists fulfills the requirement securely and efficiently.
Avoids profile proliferation and ensures other warehouse team members maintain restricted access.

Key Concept

Using Permission Sets to grant additive field-level permissions to specific users without creating redundant profiles.
Estimated Time:1m 30s
Rate this question