Soru

Zorluk: OrtaRole Hierarchy and Sharing Rules

Nova Biotech uses a custom object named Lab_Sample__c with an Organization-Wide Default (OWD) set to Private. Senior Scientists need Read access to all Lab_Sample__c records owned by Lab Technicians who report below them in the role hierarchy. Additionally, members of the Quality Assurance team (located in a separate role hierarchy branch) require Read/Write access to all Lab_Sample__c records where the Status__c field is set to 'Pending Inspection'. Which two configuration steps should the Salesforce Administrator take to satisfy these access requirements?

  1. Ensure 'Grant Access Using Hierarchies' remains enabled on the Lab_Sample__c custom object.Cevap
  2. B
    Deselect 'Grant Access Using Hierarchies' on Lab_Sample__c and create individual owner-based sharing rules for each Senior Scientist.
  3. Create a criteria-based sharing rule on Lab_Sample__c where Status__c equals 'Pending Inspection' to share records with a Public Group containing Quality Assurance members.Cevap
  4. D
    Create a Permission Set granting 'View All' data permissions on Lab_Sample__c and assign it to the Quality Assurance team members.
  5. E
    Change the Organization-Wide Default (OWD) setting for Lab_Sample__c from Private to Public Read-Only.

Cevap

The administrator must ensure 'Grant Access Using Hierarchies' remains enabled on the custom object and create a criteria-based sharing rule granting Read/Write access to the Quality Assurance Public Group when Status__c equals 'Pending Inspection'.
Enabling 'Grant Access Using Hierarchies' ensures that higher roles in the hierarchy (Senior Scientists) automatically inherit access to records owned by subordinate roles (Lab Technicians). Furthermore, creating a criteria-based sharing rule grants the Quality Assurance Public Group Read/Write access specifically when the record field Status__c equals 'Pending Inspection', satisfying both security requirements cleanly.

Adım Adım Çözüm

1
Evaluate role hierarchy access requirements for managers.
Since Lab Technicians report below Senior Scientists in the role hierarchy, keeping 'Grant Access Using Hierarchies' enabled automatically extends Read access to upper roles for custom objects.
By default, custom objects inherit hierarchy access unless explicitly deselected.
2
Evaluate cross-branch conditional access requirements for Quality Assurance.
Create a criteria-based sharing rule evaluated on Status__c = 'Pending Inspection' that grants Read/Write access to a Public Group containing QA users.
Criteria-based sharing rules open up access across role branches based on record field criteria rather than ownership.

Anahtar Kavram

Role Hierarchy Access and Criteria-Based Sharing Rules
Bu soruyu puanla