Examkin

Soru

Zorluk: OrtaProfiles and Object/Field-Level Security

AeroVanguard Logistics maintains a custom field named Driver_License_Number__c on the Contact object. Currently, 15 dispatchers are assigned to a custom profile named 'Dispatcher Profile' which grants Read and Edit access to this field. The compliance department requests that only 2 senior dispatchers retain Read and Edit access to Driver_License_Number__c, while restricting access for all other dispatchers. What is the recommended administrator configuration to achieve this security requirement with minimal administrative maintenance?

  1. Set Field-Level Security for Driver_License_Number__c to Hidden on the Dispatcher Profile, create a Permission Set granting Read and Edit access to Driver_License_Number__c, and assign it to the 2 senior dispatchers.Cevap
  2. B
    Clone the Dispatcher Profile to create a 'Senior Dispatcher Profile' with Read and Edit access to Driver_License_Number__c, remove access from the base profile, and assign the 2 senior dispatchers to the new profile.
  3. C
    Keep Read and Edit access on the Dispatcher Profile, but set Dynamic Forms component visibility rules on the Contact Lightning Record Page to hide the field from non-senior dispatchers.
  4. D
    Configure Organization-Wide Network Access login IP ranges for the 2 senior dispatchers to grant them field-level access to Driver_License_Number__c.

Cevap

Restrict access to Driver_License_Number__c on the base profile using Field-Level Security, then create and assign a Permission Set granting Read and Edit access to the 2 senior dispatchers.
In accordance with Salesforce security best practices, profiles should grant the minimum required baseline access (least privilege principle). Disabling Field-Level Security for Driver_License_Number__c on the Dispatcher Profile ensures no dispatcher sees the sensitive field by default. A Permission Set is then used to grant additive Read and Edit access specifically to the 2 senior dispatchers without needing a redundant custom profile.

Adım Adım Çözüm

1
Identify the base profile security level required for the majority of users.
Modify Field-Level Security (FLS) on the Dispatcher Profile for Driver_License_Number__c to uncheck Read and Edit access.
Profiles establish the baseline (most restrictive) access for all assigned users.
2
Create a Permission Set to grant elevated field access.
Create a new Permission Set and set FLS on Driver_License_Number__c to Read and Edit.
Permission sets are designed to grant additive permissions without creating redundant profiles.
3
Assign the Permission Set to the subset of users.
Assign the created Permission Set to the 2 senior dispatchers.
Only those 2 users receive access to the field while remaining on their existing profile.

Anahtar Kavram

Field-Level Security and Additive Permission Sets
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Profiles and Object/Field-Level Security

Bu konudan daha fazla soru