Cloud Kicks uses a custom object named Audit_Log__c to store compliance reviews. Management requires that users only have access to records they explicitly own. However, upper management must automatically inherit full read and write access to records owned by their direct and indirect subordinates. Which configuration should the administrator implement to meet these security requirements?
- Set the Organization-Wide Default (OWD) for Audit_Log__c to Private and ensure Grant Access Using Hierarchies is enabled.Cevap
- BSet the Organization-Wide Default (OWD) for Audit_Log__c to Public Read/Write and use Profiles to restrict visibility for non-owners.
- CSet the Organization-Wide Default (OWD) for Audit_Log__c to Private and disable Grant Access Using Hierarchies, then create owner-based sharing rules for managers.
- DSet the Organization-Wide Default (OWD) for Audit_Log__c to Public Read-Only and assign Permission Sets to revoke read access from non-owners.
Cevap
Set the Organization-Wide Default (OWD) for Audit_Log__c to Private and ensure Grant Access Using Hierarchies is enabled.
Setting the Organization-Wide Default (OWD) to Private restricts record access to the record owner. Enabling Grant Access Using Hierarchies ensures that users positioned higher in the role hierarchy automatically receive the same access to records owned by users below them.
Adım Adım Çözüm
Anahtar Kavram
Organization-Wide Defaults establish the baseline record access for an object, and Grant Access Using Hierarchies allows record access to roll up through the role hierarchy automatically.