Universal Containers wants to restrict baseline access to a custom object named Support_Ticket__c so that users can only view records they own. Additionally, managers must automatically retain access to records owned by their direct subordinates. Which TWO configurations must the administrator complete to meet these baseline access requirements?
- Set the Organization-Wide Default (OWD) sharing setting for Support_Ticket__c to Private.Answer
- BCreate a permission set that restricts Read access for users who do not own the record.
- Ensure that the Grant Access Using Hierarchies checkbox remains selected for Support_Ticket__c.Answer
- DDeselect the Grant Access Using Hierarchies checkbox to allow managerial access while blocking peer visibility.
Answer
To configure the baseline security according to requirements, the administrator must set the Organization-Wide Default (OWD) for Support_Ticket__c to Private and ensure that Grant Access Using Hierarchies is checked.
Setting the Organization-Wide Default to Private ensures that record access is restricted by default to record owners. Keeping Grant Access Using Hierarchies checked allows users higher up in the role hierarchy to automatically inherit access to records owned by subordinate roles.
Step-by-Step Solution
Key Concept
Organization-Wide Defaults (OWD) and Role Hierarchy Access