Examkin

Question

Difficulty: Very hardDelegated Administration

An organization is configuring Delegated Administration to decentralize user management and custom maintenance tasks while adhering to strict security boundaries. Match each administrative capability or requirement on the left with its correct Delegated Administration configuration rule or system limitation on the right.

  • Delegating custom field creation, page layout modifications, and picklist management for a custom object named Project__c.Configured by adding the specific custom object under the Custom Object Administration section of the Delegated Group.
  • Allowing delegated administrators to assign the 'Sales Operations Manager' permission set to users within their assigned roles.Configured by explicitly adding the permission set to the Assignable Permission Sets list on the Delegated Group.
  • Permitting delegated administrators to log in as any user within their delegated role hierarchy who has granted administrator login access.Supported when the 'Enable Login as Any User' option is enabled on the Delegated Administration Group.
  • Delegating field-level security updates and page layout administration for standard Account and Contact objects.Unsupported, as Delegated Administration cannot grant object or field management capabilities for standard Salesforce objects.

Answer

Delegating custom object management for Project__c requires adding it under Custom Object Administration in the Delegated Group. Delegating permission set assignment requires explicitly listing the permission set under Assignable Permission Sets. Logging in as users in delegated roles requires enabling 'Enable Login as Any User' on the Delegated Group. Attempting to delegate standard object management is unsupported because Delegated Administration only permits object administration for custom objects.
Each administrative action correctly aligns with Salesforce Delegated Administration capabilities. Managing custom objects requires adding them to Custom Object Administration. Permission set assignment requires designated Assignable Permission Sets. Logging in as users in assigned roles is enabled via 'Enable Login as Any User'. Standard object administration cannot be delegated using Delegated Administration Groups.

Step-by-Step Solution

1
Evaluate custom object delegation capabilities.
Delegated Administration permits managing custom fields, tab visibility, page layouts, and record types for custom objects specified in the Custom Object Administration section.
This establishes the appropriate configuration path for the Project__c custom object.
2
Evaluate permission set delegation capabilities.
Delegated administrators cannot assign arbitrary permission sets; they can only assign permission sets explicitly designated under Assignable Permission Sets.
This enforces privilege boundaries for permission set assignment.
3
Evaluate user login impersonation privileges.
Delegated group settings include an option 'Enable Login as Any User' allowing delegated admins to log in as users within their delegated roles.
This matches the requirement for logging in as managed users.
4
Evaluate standard object administration limitations.
Delegated Administration does not support administrative modifications (fields, layouts) for standard objects like Account and Contact.
Standard object schema management requires full system administrator privileges or higher-level administrative permissions.

Key Concept

Delegated Administration Configuration Scope and Limits
Estimated Time:3m 0s
Rate this question

Topics

Delegated Administration

More questions from this topic