Examkin

Soru

Zorluk: OrtaPermission Sets and Permission Set Groups

An administrator at a financial services firm needs to grant Read and Edit access on a custom object named 'Investment Audit' to 5 wealth managers for a temporary compliance project. These 5 wealth managers share the baseline 'Wealth Advisor' profile with 50 other advisors who must not receive access to this object. Which administrative approach best fulfills this requirement while adhering to security best practices?

  1. Create a Permission Set that grants Read and Edit access on the Investment Audit object and assign it to the 5 wealth managers.Cevap
  2. B
    Clone the 'Wealth Advisor' profile, enable Read and Edit access on the Investment Audit object in the new profile, and reassign the 5 wealth managers to it.
  3. C
    Modify the baseline 'Wealth Advisor' profile to include Read and Edit permissions on the Investment Audit object for all wealth advisors.
  4. D
    Create a Muting Permission Set containing Read and Edit access on the Investment Audit object and assign it directly to the 5 wealth managers.

Cevap

Create a Permission Set that grants Read and Edit access on the Investment Audit object and assign it to the 5 wealth managers.
Permission Sets are used to grant additional permissions to specific users on top of their baseline profile. By creating a permission set with Read and Edit access on the Investment Audit object and assigning it to the 5 wealth managers, the administrator satisfies the business requirement without granting unnecessary access to the other 45 wealth advisors who share the baseline profile.

Adım Adım Çözüm

1
Analyze the access requirement and target user group
Identified that only a subset (5 out of 50 users) on the same profile requires extra permissions.
Profiles determine baseline permissions for all assigned users, so altering the profile impacts everyone.
2
Evaluate permission assignment mechanisms in Salesforce
Determined that Permission Sets are designed to grant flexible, additive permissions to individual users.
Permission sets allow administrators to extend functionality to specific users without splitting baseline profiles.
3
Select the optimal access control method
Create a dedicated Permission Set for 'Investment Audit' access and assign it to the 5 wealth managers.
This maintains a clean security model, prevents profile sprawl, and enforces the principle of least privilege.

Anahtar Kavram

Additive Access with Permission Sets
Bu soruyu puanla

Konular

Permission Sets and Permission Set Groups

Bu konudan daha fazla soru