Examkin

Soru

Zorluk: ZorPermission Sets and Permission Set Groups

Universal Containers needs to grant a temporary 30-day assignment to a subset of support representatives allowing them to delete Case records and perform data exports for a compliance audit project. All support representatives currently share a standard Support Representative profile that restricts deletion and exporting. Which administrative approach should the Salesforce administrator implement to meet this requirement while adhering to the principle of least privilege?

  1. Create a Permission Set with Case Delete and Export permissions, assign it to the specific support representatives, and set an expiration date on the Permission Set Assignment.Cevap
  2. B
    Clone the Support Representative profile, grant Case Delete and Export permissions on the new profile, and reassign the subset of representatives to this profile for 30 days.
  3. C
    Modify the standard Support Representative profile to enable Case Delete and Export permissions, then remove the permissions manually after the 30-day period ends.
  4. D
    Add a Muting Permission Set to a new Permission Set Group to grant Case Delete and Export permissions to the designated representatives.

Cevap

Create a Permission Set containing Case Delete and Export permissions, assign it to the designated support representatives, and configure an assignment expiration date.
Permission sets are designed to grant additive permissions to specific users without altering baseline profiles. Assigning a permission set with an explicit assignment expiration date ensures that only the targeted users receive Case Delete and Export access and that access automatically expires after 30 days.

Adım Adım Çözüm

1
Analyze access scope and requirements.
Additional permissions (Case Delete and Data Export) are needed for only a subset of users sharing a profile for a limited 30-day timeframe.
Profiles define baseline access for role categories, whereas permission sets grant additive permissions to specific users.
2
Select the appropriate security mechanism.
Create a dedicated Permission Set granting Case Delete and Export capabilities.
This avoids profile cloning and adheres strictly to the principle of least privilege.
3
Configure the access lifecycle.
Assign the Permission Set to the target users with an explicit Permission Set Assignment Expiration Date set to 30 days.
Salesforce supports native expiration dates on permission set assignments, ensuring automated expiration without manual intervention.

Anahtar Kavram

Permission Set Assignment Expiration and Additive Permissions
Bu soruyu puanla

Konular

Permission Sets and Permission Set Groups

Bu konudan daha fazla soru