Examkin

Soru

Zorluk: ZorDelegated Administration

Universal Containers has configured a Delegated Administration group named 'Support Lead Admins' to allow regional support leads to perform user management operations. The group configuration includes the 'Support Representative' role and subordinate roles, as well as specified assignable profiles.

A delegated administrator in this group attempts to process an offboarding request for a support representative who is assigned to an active workflow rule and an open approval process. The delegated administrator discovers that the option to deactivate the user account is unavailable in the user interface.

Which statement accurately explains why the delegated administrator cannot deactivate this user account?

  1. Delegated administration permissions do not include the ability to deactivate user accounts, though delegated administrators can freeze user accounts to temporarily prevent system access.Cevap
  2. B
    The user account is locked from deactivation because the user is actively referenced in an open approval process, requiring the account to be frozen instead.
  3. C
    Delegated administrators are restricted from modifying user status unless additional custom profiles are created and assigned to replace standard profile assignments.
  4. D
    Delegated administration functionality is disabled for user record management unless Organization-Wide Defaults for the User object are configured to grant access using role hierarchies.

Cevap

Delegated administration permissions do not include the ability to deactivate user accounts, though delegated administrators can freeze user accounts to temporarily prevent system access.
Salesforce Delegated Administration intentionally restricts the ability to deactivate users. Delegated administrators can unlock users, reset passwords, manage permission sets, and freeze user accounts within specified roles, but deactivating a user account requires full administrative privileges.

Adım Adım Çözüm

1
Analyze the capabilities and administrative boundaries of Salesforce Delegated Administration.
Delegated administrators can create users, edit user details, reset passwords, assign specified profiles/permission sets, unlock users, and freeze user accounts for specified roles.
Delegated Administration decentralizes specific admin duties without granting full administrator permissions.
2
Identify the restriction regarding user deactivation.
Deactivating a user account requires full System Administrator privileges ('Manage Users' permission) and cannot be granted through a Delegated Administration group.
User deactivation has broad system implications (such as reassignment of ownership and licensing updates) that are restricted from delegated group capabilities.
3
Determine the supported alternative action available to delegated administrators when immediate login restriction is needed.
Delegated administrators can freeze user accounts to block login access immediately.
Freezing prevents user authentication without altering account assignments or dependencies.

Anahtar Kavram

Delegated Administration Boundaries and User Management Capabilities
Tahmini Süre:2m 0s
Bu soruyu puanla

Konular

Delegated Administration

Bu konudan daha fazla soru