Examkin

Question

Difficulty: EasyPermission Sets and Permission Set Groups

An administrator needs to grant a single Sales Representative the ability to edit the 'Budget' field on Opportunity records. Multiple other Sales Representatives share the same profile and must not be granted edit access to this field. What is the recommended Salesforce best practice to meet this requirement?

  1. Create a Permission Set that grants edit permission for the Budget field and assign it to the specific Sales Representative.Answer
  2. B
    Create a new custom profile with edit access to the Budget field and assign all Sales Representatives to this new profile.
  3. C
    Modify the existing shared profile to grant edit access to the Budget field for all assigned users.
  4. D
    Enable Grant Access Using Hierarchies on the Opportunity object to grant field-level edit permission.

Answer

Create a Permission Set that grants edit permission for the Budget field and assign it to the specific Sales Representative.
In Salesforce security architecture, profiles establish baseline access while Permission Sets are used to grant additional permissions on an ad-hoc or individual basis. Assigning a Permission Set with edit access on the 'Budget' field to only the specific user satisfies the requirement without expanding permissions for other users on the same profile.

Step-by-Step Solution

1
Identify the base access configuration
Multiple Sales Representatives share a common profile where the 'Budget' field is read-only or hidden.
Profiles set baseline permissions for all assigned users.
2
Determine the scope of the required access expansion
Only one specific Sales Representative requires edit access.
Modifying a shared profile or creating redundant profiles for minor access differences leads to poor profile management.
3
Apply the principle of additive permissions using Permission Sets
Create a Permission Set enabling Field-Level Security edit access on the 'Budget' field and assign it to the single user.
Permission Sets extend user entitlements additively without altering profile assignments.

Key Concept

Additive permissions via Permission Sets
Rate this question

Topics

Permission Sets and Permission Set Groups

More questions from this topic