An administrator at Financial Force Partners installed a productivity-focused managed package from the AppExchange to provide advanced email tracking and activity analytics. The package includes custom objects, custom tab access, and a packaged permission set. The administrator must grant access to this package to 20 account executives who are assigned the standard 'Sales User' profile, while ensuring the remaining 80 sales representatives sharing the exact same profile do not receive access or clutter their user interface. Which configuration strategy should the administrator execute to grant access efficiently?
- Assign the managed package licenses to the 20 account executives and assign them the package-provided permission set.Answer
- BClone the 'Sales User' profile to create an 'Analytics Sales User' profile, enable package object permissions on it, and reassign the 20 account executives to the new profile.
- CModify the standard 'Sales User' profile to enable package component access for all users, then restrict data visibility for the remaining 80 users using Organization-Wide Defaults.
- DConvert the managed package into an unmanaged package deployment to allow direct profile-level editing of object access across individual user records.
Answer
Assign the managed package licenses to the target 20 account executives and assign them the package-provided permission set.
The correct approach is to assign managed package licenses and the included permission set to the specific users who require access. Best practices dictate using Permission Sets for additive permissions targeted at a subset of users sharing a profile, ensuring that other users on the profile remain unaffected and avoiding profile proliferation.
Step-by-Step Solution
Key Concept
AppExchange Package Access and Permission Set Assignment