Examkin

Soru

Zorluk: ZorRole Hierarchy and Sharing Rules

Universal Containers tracks field equipment maintenance using a custom object named `Equipment_Maintenance__c`. The Organization-Wide Default (OWD) for the object is set to Private, and Grant Access Using Hierarchies is enabled. The security team establishes the following access requirements:
1. Regional Service Managers must automatically inherit access to maintenance records owned by Field Technicians reporting below them in the role hierarchy.
2. The Safety Compliance Team (a public group) must have Read-Only access to all maintenance records where the `Safety_Hazard__c` checkbox is marked `True`, regardless of who owns the record.
3. The Operations Director role must have Read/Write access to all maintenance records owned by users in the Field Technician role.

Which TWO administrative configuration steps are required to fulfill these requirements?

  1. Create a criteria-based sharing rule on `Equipment_Maintenance__c` to grant Read-Only access to the Safety Compliance Team public group when `Safety_Hazard__c` equals `True`.Cevap
  2. Create an owner-based sharing rule on `Equipment_Maintenance__c` to grant Read/Write access to the Operations Director role for records owned by the Field Technician role.Cevap
  3. C
    Deselect the 'Grant Access Using Hierarchies' checkbox on `Equipment_Maintenance__c` so that managers only view records shared via criteria.
  4. D
    Assign a permission set with 'View All' object-level permission on `Equipment_Maintenance__c` to members of the Safety Compliance Team.
  5. E
    Change the Organization-Wide Default (OWD) for `Equipment_Maintenance__c` to Public Read-Only so Safety Compliance members can view safety hazard records.

Cevap

The administrator must create a criteria-based sharing rule to grant Read-Only access to the Safety Compliance Team when Safety_Hazard__c equals True, and create an owner-based sharing rule to grant Read/Write access to the Operations Director role for records owned by the Field Technician role.
Creating a criteria-based sharing rule selectively shares only records matching Safety_Hazard__c = True with the Safety Compliance Team public group. Creating an owner-based sharing rule explicitly grants Read/Write access to the Operations Director role for records owned by the Field Technician role. Existing role hierarchy settings already fulfill manager access without modification.

Adım Adım Çözüm

1
Evaluate role hierarchy inheritance
Since 'Grant Access Using Hierarchies' is enabled on Equipment_Maintenance__c, Regional Service Managers automatically inherit access to records owned by subordinate Field Technicians without needing additional sharing rules.
Standard role hierarchy behavior automatically grants record access upward when Grant Access Using Hierarchies is checked.
2
Configure conditional access for the Safety Compliance Team
Create a criteria-based sharing rule on Equipment_Maintenance__c with condition Safety_Hazard__c = True, sharing Read-Only access with the Safety Compliance Team public group.
Criteria-based sharing rules evaluate specific record field values to open up record access beyond OWD restrictions to designated groups.
3
Configure role-based record sharing for the Operations Director
Create an owner-based sharing rule on Equipment_Maintenance__c targeting records owned by the Field Technician role and sharing Read/Write access with the Operations Director role.
Owner-based sharing rules extend record access laterally or across specific roles based on ownership.

Anahtar Kavram

Combining Organization-Wide Defaults, Role Hierarchy inheritance, owner-based sharing rules, and criteria-based sharing rules to meet complex record access requirements while maintaining least privilege.
Bu soruyu puanla

Konular

Role Hierarchy and Sharing Rules

Bu konudan daha fazla soru