Examkin

Question

Difficulty: Very hardPermission Sets and Permission Set Groups

BioPharma Global utilizes a core Permission Set Group named "Sales_Operations_PSG" to bundle object permissions, custom field permissions, and system privileges for internal sales operations staff. During periodic compliance reviews, external auditors require access to the majority of permissions contained in "Sales_Operations_PSG" to evaluate operational workflows. However, corporate governance policies strictly forbid external auditors from approving contracts or editing sensitive compliance fields on custom objects. How should the administrator configure access for external auditors while minimizing administrative overhead and maintaining scalability?

  1. Create a dedicated Permission Set Group for external auditors that includes the component permission sets, and add a Muting Permission Set to this group that disables contract approval and compliance field editing.Answer
  2. B
    Clone the Sales Operations user profile, disable contract approval and compliance field editing permissions on the cloned profile, and assign this new profile to external auditors.
  3. C
    Modify the base user profile assigned to external auditors to revoke contract and field permissions, as profile settings automatically override permissions granted by Permission Set Groups.
  4. D
    Create separate permission sets for each individual permission required, remove the Permission Set Group architecture, and assign custom profiles to each auditor based on their specific audit scope.

Answer

Create a dedicated Permission Set Group for external auditors that includes the component permission sets, and add a Muting Permission Set to this group that disables contract approval and compliance field editing.
The correct answer leverages a Muting Permission Set inside a dedicated Permission Set Group. Muting permission sets allow administrators to aggregate standard permission sets into a group and selectively mute specific object, field, or system permissions for a target user audience without modifying the underlying permission sets or creating redundant profiles.

Step-by-Step Solution

1
Analyze access requirements for the external auditor user group.
External auditors require most permissions bundled in the standard Sales Operations permission sets, but two specific capabilities (contract approval and custom compliance field editing) must be restricted.
Reusing established permission sets avoids duplicating permission administration across similar user personas.
2
Evaluate Salesforce permission architecture capabilities.
Permission Set Groups support Muting Permission Sets, which selectively turn off (mute) specific permissions granted by permission sets contained within that particular group.
Because Salesforce permissions are additive by default across profiles and permission sets, muting permission sets within a group provide the standard mechanism to subtract permissions.
3
Configure the optimal access model.
Create a dedicated Permission Set Group for auditors, include the standard sales permission sets, and add a Muting Permission Set that mutes contract approval and field edit privileges.
This solution minimizes maintenance overhead, preserves the internal sales group configuration, and avoids profile proliferation.

Key Concept

Permission Set Groups and Muting Permission Sets
Estimated Time:2m 0s
Rate this question

Topics

Permission Sets and Permission Set Groups

More questions from this topic