Soru

Zorluk: OrtaUser Management and Provisioning

A Salesforce Administrator needs to manually provision a new sales representative who requires standard Salesforce license access, reporting visibility based on management hierarchy, and specialized permissions to delete lead records. What is the correct sequence of administrative steps to provision this user while maintaining the principle of least privilege?

  1. 1Navigate to Setup > Users and create a new user record, selecting the Salesforce User License and a baseline restrictive Profile.
  2. 2Select and assign the designated Role within the Role Hierarchy on the user record page.
  3. 3Save the new user record to generate the user account and trigger the initial activation email.
  4. 4Access Permission Set Assignments on the User Detail page to assign the Permission Set granting Lead Delete privileges.

Cevap

The correct order of steps to provision the user is: 1) Create the user record with the Salesforce User License and baseline Profile, 2) Assign the appropriate Role in the Role Hierarchy on the user creation screen, 3) Save the user record to commit account creation, and 4) Assign the specialized Lead Delete Permission Set from the User Detail page.
Provisioning a user in Salesforce follows a logical sequence: first, initialize the user record with mandatory fields including User License and a minimal baseline Profile; second, set the Role to establish hierarchy-based sharing; third, save the record to generate the account; fourth, navigate to the newly created User Detail page to assign supplemental Permission Sets for specialized capabilities like deleting leads.

Adım Adım Çözüm

1
Define baseline identity and minimum access
User record initialized with correct User License and minimal baseline Profile
Salesforce user creation requires license and profile selection to establish base system availability and minimum permissions.
2
Configure hierarchy-based record access
User record assigned to correct Role
Setting the Role on the user record defines record sharing and management visibility parameters.
3
Commit record creation in Salesforce Setup
User record created in database and activation email dispatched
Saving the record creates a valid User ID in the org, enabling related list items like Permission Set assignments.
4
Grant supplemental functional permissions
Lead Delete Permission Set linked to the user account
Following least privilege, specialized permissions (like record deletion) are layer-assigned via Permission Sets after user creation.

Anahtar Kavram

User Provisioning Workflow and Least Privilege Access Assignment
Bu soruyu puanla