Examkin

Question

Difficulty: MediumPermission Sets and Permission Set Groups

A logistics company uses a standard profile to grant baseline read-only access to all Customer Service Representatives. During a quarterly system audit, five specific representatives need temporary administrative access to create and modify Vehicle Maintenance Log records. The administrator wants to grant these extended permissions without altering the access rights of the remaining representatives assigned to the standard profile. Which configuration approach should the administrator implement to grant these additional permissions?

  1. Create a Permission Set with Create and Edit access on Vehicle Maintenance Logs and assign it to the five selected representatives.Answer
  2. B
    Clone the baseline Customer Service profile, enable Create and Edit permissions on Vehicle Maintenance Logs, and assign the new profile to the five representatives.
  3. C
    Modify the baseline Customer Service profile to include Create and Edit access on Vehicle Maintenance Logs for all assigned representatives.
  4. D
    Create a custom profile for Vehicle Maintenance Auditors with full access rights and reassign all customer service staff to this new profile.

Answer

The administrator should create a Permission Set with Create and Edit permissions on Vehicle Maintenance Logs and assign it to the five representatives who require the additional access.
Creating a dedicated Permission Set and assigning it specifically to the five representatives allows the administrator to additively grant Create and Edit access on Vehicle Maintenance Logs without modifying the shared base profile or affecting other users.

Step-by-Step Solution

1
Identify the base security model and administrative requirement.
All representatives share a base profile, but only a subset requires extra capabilities (Create and Edit access on Vehicle Maintenance Logs).
Profiles define baseline access, whereas targeted additions should be managed independently.
2
Select the appropriate Salesforce access mechanism for additive permissions.
A Permission Set is chosen to grant the additional object permissions.
Permission Sets extend user permissions additively without altering the underlying profile assigned to other users.
3
Assign the Permission Set to the affected users.
Only the five specific representatives receive the required Create and Edit access on Vehicle Maintenance Logs.
This maintains least privilege access for all other representatives on the base profile.

Key Concept

Profiles provide foundational access, while Permission Sets are used to grant additive object, field, and system permissions to individual users or subsets of users.
Rate this question

Topics

Permission Sets and Permission Set Groups

More questions from this topic