An administrator needs to grant Read and Edit access for a sensitive custom field, Salary_Tier__c, on the Employee object to a specific subset of users assigned to the Standard User profile. All other users with the Standard User profile must not be able to view or edit this field. Which TWO configurations should the administrator implement?
- Set Field-Level Security on the Salary_Tier__c field to restricted (not visible) for the Standard User profile.Cevap
- Create a permission set that grants Read and Edit access to Salary_Tier__c and assign it to the specific subset of users.Cevap
- CCreate a new custom profile for each individual user needing access and grant Field-Level Security on the profile level.
- DRemove the Salary_Tier__c field from the object page layout to prevent access across reports and API calls.
Cevap
The administrator should restrict Field-Level Security on the base Standard User profile so the field is hidden by default, and create a permission set granting Read and Edit access to Salary_Tier__c and assign it to the users who require access.
To grant selective access while maintaining default restriction, Field-Level Security must be un-checked (hidden) on the base profile, and a Permission Set granting Read and Edit access must be assigned to the designated users. Salesforce security follows a model where profiles establish baseline restrictions and permission sets grant additive access.
Adım Adım Çözüm
Anahtar Kavram
Field-Level Security and Permission Sets
Tahmini Süre:1m 0s