Examkin

Soru

Zorluk: OrtaOrganization-Wide Defaults (OWD)

Horizon Healthcare tracks internal compliance reviews using a custom object named Feedback__c. The legal team mandates that records must only be visible and editable by the record owner. Additionally, executive leadership requires that upper-level managers MUST NOT automatically inherit access to their subordinates' Feedback__c records through the management structure. Which configuration should the System Administrator implement to satisfy these security requirements?

  1. Set the Organization-Wide Default (OWD) for Feedback__c to Private and deselect the Grant Access Using Hierarchies option.Cevap
  2. B
    Set the Organization-Wide Default (OWD) for Feedback__c to Private and configure User Profiles to restrict Object-Level Read permissions for managers.
  3. C
    Set the Organization-Wide Default (OWD) for Feedback__c to Private while keeping Grant Access Using Hierarchies enabled.
  4. D
    Create a Permission Set for management roles that explicitly revokes record sharing access for Feedback__c.

Cevap

Set the Organization-Wide Default (OWD) for Feedback__c to Private and deselect the Grant Access Using Hierarchies option.
Setting Organization-Wide Defaults (OWD) to Private restricts baseline record access strictly to record owners. Deselecting 'Grant Access Using Hierarchies' on a custom object stops Salesforce from automatically granting access to users higher in the role hierarchy. Combining both settings enforces the requirement that only owners can access their records without managerial override.

Adım Adım Çözüm

1
Determine the required baseline access level.
Since only record owners should see and edit their records by default, the baseline Organization-Wide Default (OWD) must be set to Private.
OWD sets the most restrictive baseline access for records across an organization.
2
Evaluate role hierarchy propagation requirements.
Standard security behavior propagates record access to higher roles in the hierarchy, but deselecting 'Grant Access Using Hierarchies' disables this access for custom objects.
Disabling Grant Access Using Hierarchies prevents managers and superiors from automatically gaining visibility into records owned by their subordinates.

Anahtar Kavram

Organization-Wide Defaults (OWD) and Grant Access Using Hierarchies for Custom Objects
Bu soruyu puanla

Konular

Organization-Wide Defaults (OWD)

Bu konudan daha fazla soru