Examkin

Soru

Zorluk: OrtaDelegated Administration

ApexCare Health configures a Delegated Administration group to grant a Regional Support Manager administrative privileges over users in the 'US Field Support' role. The setup includes user management rights, password resets, and permission set assignment capabilities. The Regional Support Manager needs to grant extra object permissions to a single user in their delegated role without affecting other team members who share the same profile. Which administrative approach should the Regional Support Manager take within their delegated authority?

  1. Assign an authorized permission set containing the required object permissions directly to the user.Cevap
  2. B
    Modify the user's assigned profile to enable the required object access permissions.
  3. C
    Create a new custom profile with the required object permissions and assign it to the user.
  4. D
    Freeze the user account and unfreeze it under a modified profile configuration to update access settings.

Cevap

Assign an authorized permission set containing the required object permissions directly to the user.
Delegated administrators are empowered to assign designated permission sets to users within their assigned role hierarchy. Utilizing a permission set grants the necessary object access to the specific user while maintaining the security baseline for all other users assigned to the profile.

Adım Adım Çözüm

1
Identify the requirement to grant additive permissions to a specific user without altering permissions for other users sharing the same profile.
Recognize that permission sets must be used for user-specific additive permissions.
Profiles grant baseline permissions to groups of users, whereas permission sets extend access on an individual basis.
2
Evaluate Delegated Administration capabilities regarding user permission management.
Confirm that delegated administrators can assign explicitly specified permission sets to users within their assigned roles.
Delegated group settings define specific permission sets that delegated admins are permitted to assign.
3
Eliminate options requiring profile creation or modification.
Determine that creating or editing profiles is beyond delegated administration scope and impacts broader user groups.
Profile administrative changes require full system administration privileges ('Manage Profiles and Permission Sets').

Anahtar Kavram

Delegated Administration Permission Set Assignment and Profile Boundaries
Bu soruyu puanla

Konular

Delegated Administration

Bu konudan daha fazla soru