A company wants to secure a custom object named Staff_Evaluation__c. The administrator must ensure that users can only access records they own, while managers above them in the role hierarchy are automatically granted access. Which TWO configuration steps should the administrator take to fulfill this requirement?
- Set the Organization-Wide Default (OWD) internal access for Staff_Evaluation__c to Private.Answer
- Ensure the Grant Access Using Hierarchies checkbox remains selected for Staff_Evaluation__c.Answer
- CCreate a permission set that restricts record access for non-owner users.
- DDeselect the Grant Access Using Hierarchies setting on the custom object to restrict visibility strictly to owners.
Answer
To meet the requirements, the administrator must set the Organization-Wide Default (OWD) internal access for the custom object to Private and ensure that the Grant Access Using Hierarchies option is selected.
To restrict records so users only access what they own, the Organization-Wide Default must be set to Private. To allow managers automatic access to their subordinates' records, the Grant Access Using Hierarchies option must remain enabled.
Step-by-Step Solution
Key Concept
Organization-Wide Defaults establish the baseline record access, while the Role Hierarchy expands access vertically to managers when enabled.