Soru

Zorluk: ZorUser Management and Provisioning

A Salesforce Administrator at a financial services enterprise must resolve two urgent user management requirements:

1. A temporary internal Risk Auditor requires read-only access to custom Compliance Audit records for 90 days. This access must not be granted to other users assigned to the standard auditor profile.
2. An active Risk Manager who serves as a default record owner in automated Lead routing rules and is referenced in custom user hierarchy fields must have their system login access blocked immediately.

Which TWO administrative actions should be taken to satisfy these requirements while adhering to Salesforce best practices? (Select TWO)

  1. Assign a permission set granting Read access to Compliance Audit records to the Risk Auditor and set an expiration date on the permission set assignment.Cevap
  2. B
    Clone the standard auditor profile, grant Read access on Compliance Audit records in the new profile, and set a profile expiration date of 90 days.
  3. Freeze the Risk Manager's user record from Setup to instantly prevent user login while preserving automated processes and hierarchy references.Cevap
  4. D
    Deactivate the Risk Manager's user account immediately from Setup to revoke all system access and reassign their active licenses.

Cevap

The correct actions are assigning a permission set with an expiration date to the temporary Risk Auditor and freezing the Risk Manager's user account from Setup.
The correct options state that assigning a permission set with an expiration date grants temporary object permissions efficiently without modifying base profiles, and freezing the user account immediately blocks login capability without disrupting automated Lead routing rules or custom hierarchy references.

Adım Adım Çözüm

1
Evaluate provision requirements for temporary, additive object access.
Identify that Permission Sets support expiration dates for individual user assignments, whereas Profiles do not support expiration dates and should not be used for user-specific permission additions.
Salesforce security best practices mandate using Permission Sets and Permission Set Groups for temporary or user-specific permission grants.
2
Evaluate access block requirements for users tied to automated system features.
Determine that freezing the user account blocks authentication immediately while preventing configuration failures in Lead routing or custom hierarchy references.
User deactivation is blocked or causes runtime errors when the target user is referenced as a default owner in active automation or custom hierarchy fields.

Anahtar Kavram

User Provisioning via Permission Set Expiration and User Freezing vs Deactivation
Bu soruyu puanla