Examkin

Soru

Zorluk: OrtaUser Management and Provisioning

A Salesforce Administrator at a commercial real estate firm needs to onboard a team of regional brokers. The brokers require standard CRM capabilities along with temporary access to a custom 'Property Appraisals' object. Company security policy dictates that baseline permissions should remain standardized and that custom object access must be assigned additively without proliferating custom profiles. Which TWO actions should the administrator take to provision user access in accordance with best practices?

  1. Assign the users a standard base profile (such as Standard User) to grant core CRM functionality.Cevap
  2. Create a permission set granting Read and Edit permissions on the 'Property Appraisals' object and assign it to the brokers.Cevap
  3. C
    Clone the standard profile to create a dedicated custom profile that includes permissions for the 'Property Appraisals' object.
  4. D
    Add the brokers' IP addresses to Network Access under Organization-Wide Security to enforce profile-level login restrictions.

Cevap

The administrator should assign the brokers a standard baseline profile for core CRM functionality and assign a custom permission set granting access to the 'Property Appraisals' object.
Assigning a standard baseline profile establishes core functionality, while utilizing a permission set for the custom object grants flexible, additive permissions without creating redundant profiles.

Adım Adım Çözüm

1
Determine the baseline user permission requirements across standard objects.
Identify that a standard profile provides the necessary foundational access without requiring custom profile management.
Profiles should define minimum baseline access common across user cohorts.
2
Determine additional custom object permission requirements.
Identify that access to 'Property Appraisals' is additive and targeted to a specific subset of users.
Additive permissions should be granted via permission sets to adhere to the principle of least privilege and prevent profile duplication.
3
Provision user accounts using the standard base profile and assign the custom permission set.
Users receive baseline access plus targeted access to the custom object.
Combines maintainable base security with flexible, modular user provisioning.

Anahtar Kavram

Modular user provisioning using standard profiles for baseline access and permission sets for additive object permissions.
Bu soruyu puanla

Konular

User Management and Provisioning

Bu konudan daha fazla soru