Examkin

Question

Difficulty: MediumPermission Sets and Permission Set Groups

Helios Solar has three sales engineers who require access to create custom Solution Design records and export inventory reports. Their assigned 'Sales User' profile currently restricts these capabilities. The system administrator must grant these extra permissions to only these three users while adhering to Salesforce security best practices. How should the administrator meet this requirement?

  1. Create a permission set with permissions to create Solution Design records and export reports, then assign it to the three sales engineers.Answer
  2. B
    Clone the 'Sales User' profile, enable Solution Design creation and report export permissions, and reassign the three engineers to the new profile.
  3. C
    Edit the baseline 'Sales User' profile to enable Solution Design creation and report export for all sales users.
  4. D
    Create a new role in the role hierarchy that grants implicit edit permissions on Solution Design records and assign it to the three sales engineers.

Answer

Create a permission set with permissions to create Solution Design records and export reports, then assign it to the three sales engineers.
Salesforce security architecture emphasizes keeping profiles minimal and using permission sets to grant additive capabilities to specific users. Building a permission set with the required object and export permissions and assigning it directly to the designated engineers cleanly satisfies the business requirement without modifying baseline profiles.

Step-by-Step Solution

1
Analyze the access requirement.
The requirement asks for additive object-level permissions (create custom object records) and system permissions (export reports) for a specific subset of users.
Profiles define standard baseline access for job functions, whereas permission sets extend access flexibly.
2
Determine the appropriate Salesforce security mechanism.
Configure a permission set containing the necessary object and system settings.
Using a permission set prevents profile proliferation and enforces least-privilege security.
3
Assign the permission set to target users.
Assign the created permission set specifically to the three sales engineers.
Direct assignment ensures only the intended users receive the elevated privileges.

Key Concept

Using Permission Sets to Grant Additive Access
Rate this question

Topics

Permission Sets and Permission Set Groups

More questions from this topic