Soru

Zorluk: OrtaOrganization-Wide Defaults (OWD)

Apex Financial needs to secure a custom object called Financial Audit. The security team mandates that records must only be visible to the record owner and users positioned above the owner in the role hierarchy. Which two configuration steps should the Salesforce administrator perform to satisfy these security requirements?

  1. Set the Organization-Wide Default (OWD) baseline access for the Financial Audit object to Private.Cevap
  2. Ensure the Grant Access Using Hierarchies setting remains selected for the Financial Audit object.Cevap
  3. C
    Set the Object Permissions on the standard user Profile to Private for the Financial Audit object.
  4. D
    Deselect the Grant Access Using Hierarchies option and assign Permission Sets to managers to open up record access.

Cevap

The administrator must set the Organization-Wide Default (OWD) for the Financial Audit custom object to Private and ensure that the Grant Access Using Hierarchies checkbox is selected.
Setting the Organization-Wide Default (OWD) to Private establishes the most restrictive baseline access so that users only see their own records. Retaining the 'Grant Access Using Hierarchies' setting ensures that management above the owner in the role hierarchy automatically receives record access.

Adım Adım Çözüm

1
Determine the baseline record sharing model.
Setting Organization-Wide Defaults (OWD) to Private restricts record visibility so that non-owners cannot see records by default.
OWD is the only mechanism in Salesforce used to set the default baseline data access level for all records of an object.
2
Evaluate role hierarchy access propagation for custom objects.
Leaving 'Grant Access Using Hierarchies' enabled allows users above the owner in the role hierarchy to automatically inherit access to the records.
By default, custom objects have 'Grant Access Using Hierarchies' enabled, which allows role hierarchy access rules to open up visibility above record owners.

Anahtar Kavram

Organization-Wide Defaults (OWD) set default baseline record visibility, while Grant Access Using Hierarchies allows record access to propagate upwards through the role hierarchy.
Bu soruyu puanla