Examkin

Soru

Zorluk: ZorRole Hierarchy and Sharing Rules

A System Administrator at AeroPulse Avionics is configuring record-level security for a custom object named Supplier_Audit__c. The Organization-Wide Default (OWD) for Supplier_Audit__c is set to Private. Executive management specifies two key security requirements:
1. Record access must NOT automatically propagate up the role hierarchy to managers of record owners.
2. Members of the 'Compliance Quality Group' public group must be granted Read/Write access to all Supplier_Audit__c records where the Audit_Status__c field is set to 'Completed'.

Which TWO configuration steps should the administrator perform to satisfy these security requirements? (Select 2 answers)

  1. Deselect the 'Grant Access Using Hierarchies' checkbox on the Supplier_Audit__c custom object definition.Cevap
  2. Create a criteria-based sharing rule on Supplier_Audit__c that shares records matching Audit_Status__c = 'Completed' with the 'Compliance Quality Group' public group, granting Read/Write access.Cevap
  3. C
    Change the Organization-Wide Default (OWD) for Supplier_Audit__c to Public Read-Only and assign a Permission Set restricting edit permissions.
  4. D
    Create an owner-based sharing rule to share all Supplier_Audit__c records owned by subordinate roles directly with the Compliance Quality Group.
  5. E
    Modify upper-management user Profiles to disable the 'View All' object permission on Supplier_Audit__c.

Cevap

The administrator must deselect the 'Grant Access Using Hierarchies' setting on the Supplier_Audit__c object definition and create a criteria-based sharing rule targeting records with Audit_Status__c = 'Completed' to share with the Compliance Quality Group.
To satisfy both requirements: (1) Unchecking 'Grant Access Using Hierarchies' on the custom object definition stops records from automatically rolling up access to managers higher in the role hierarchy when OWD is Private. (2) Creating a criteria-based sharing rule evaluates the record's Audit_Status__c field value ('Completed') and grants Read/Write access specifically to the 'Compliance Quality Group' public group.

Adım Adım Çözüm

1
Evaluate the requirement to block automatic record access rollup in the role hierarchy.
Identify that 'Grant Access Using Hierarchies' is enabled by default on custom objects and must be manually deselected.
Deselecting this checkbox on a custom object ensures users higher in the role hierarchy do not receive automatic access to records owned by subordinates.
2
Evaluate the requirement to grant access based on a specific field value (Audit_Status__c = 'Completed').
Select a criteria-based sharing rule as the appropriate sharing mechanism.
Criteria-based sharing rules evaluate record field values (such as picklist status) to automatically grant access to specific public groups or roles regardless of record ownership.

Anahtar Kavram

Disabling Role Hierarchy Record Rollup & Implementing Criteria-Based Sharing Rules
Bu soruyu puanla

Konular

Role Hierarchy and Sharing Rules

Bu konudan daha fazla soru