A Salesforce Administrator is configuring a Lightning record page for a custom Compliance Audit object. The business requires the sensitive field 'Penalty Amount' to appear on the Lightning record page only when the 'Audit Status' picklist field is set to 'Non-Compliant'. Additionally, data security policies require that users without proper authorization cannot access 'Penalty Amount' values through reports, list views, or API exports. Which combination of configurations should the administrator use to fulfill these requirements?
- Configure Field-Level Security to restrict field access for unauthorized users, and set up a Dynamic Forms component visibility rule on the Lightning record page based on Audit Status.Answer
- BSet up a Dynamic Forms component visibility rule on the Lightning record page, which automatically restricts API access and reporting visibility when the field is hidden.
- CCreate separate Profiles for each Audit Status value and assign custom page layouts to control both UI visibility and data access.
- DSet Organization-Wide Defaults for the Compliance Audit object to Private and rely on Dynamic Dashboard running user settings to enforce field security.
Answer
Configure Field-Level Security to restrict field access for unauthorized users, and set up a Dynamic Forms component visibility rule on the Lightning record page based on Audit Status.
The correct answer combines Field-Level Security (FLS) with Dynamic Forms component visibility. FLS is mandatory for data security across all entry points (reports, list views, API, and record pages). Dynamic Forms component visibility provides the required conditional rendering on the record page based on the 'Audit Status' picklist value.
Step-by-Step Solution
Key Concept
Dynamic Forms Visibility vs. Field-Level Security