A Salesforce Administrator at a financial services firm needs to secure access to a custom field, Tax_Identification_Number__c, on the Account object. All users assigned to the Standard Support profile must be prevented from viewing or editing this field. However, two designated support lead users require Read access to this field. Additionally, all users on the Standard Support profile must be blocked from logging in when outside the corporate network IP range. Which two administrative actions should be implemented to fulfill these security requirements? (Choose 2 answers)
- Deselect the Visible and Read-Only checkboxes for Tax_Identification_Number__c on the Standard Support profile, and assign a Permission Set granting Read access on the field to the two support lead users.Cevap
- Add the corporate network IP addresses to the Login IP Ranges section on the Standard Support profile settings.Cevap
- CSet component visibility rules on Dynamic Forms to hide the Tax_Identification_Number__c field on the Account record page for users with the Standard Support profile.
- DAdd the corporate network IP addresses to the Organization-Wide Network Access settings in Setup to restrict login access exclusively for Standard Support profile users.
Cevap
To satisfy the security requirements, the administrator should deselect visibility for the custom field on the profile and grant Read access via a permission set to designated leads, as well as configure Login IP Ranges on the profile to restrict network access.
Field-Level Security (FLS) configured at the profile level ensures that users on that profile cannot access the field in UI, reports, or APIs. A permission set can then additively grant read access to specific individuals without altering the base profile. Furthermore, setting Login IP Ranges directly on the profile restricts users on that profile to logging in exclusively within the specified IP range.
Adım Adım Çözüm
Anahtar Kavram
Profiles establish maximum baseline restrictions and profile-level IP limits, whereas Permission Sets grant additive field permissions to targeted users.