Examkin

Soru

Zorluk: OrtaUser Management and Provisioning

A healthcare organization requires 15 compliance auditors who belong to different departments—such as Billing, Customer Support, and Legal—to access audit records and view restricted compliance fields. Each auditor currently holds a unique base profile aligned with their primary job function. The administrator needs to grant these additional object and field permissions without altering the base permissions of their existing profiles or proliferating duplicate profiles. Which administrative strategy should the administrator implement to fulfill this requirement?

  1. Create a single permission set containing the required object and field access, and assign it to the 15 compliance auditors.Cevap
  2. B
    Clone each department profile, enable the required object and field permissions on the cloned profiles, and reassign the auditors to these new profiles.
  3. C
    Deactivate the current user accounts and provision new user accounts assigned to a newly created Compliance Auditor profile.
  4. D
    Add the compliance audit IP range to the organization's Network Access settings to grant automatic field visibility to logged-in auditors.

Cevap

The administrator should create a single permission set with the required object and field permissions and assign it directly to the 15 compliance auditors.
The correct approach uses a permission set to grant supplemental object and field access to the 15 compliance auditors. Permission sets provide additive permissions, allowing administrators to grant extra access to specific users without modifying their baseline profiles or creating redundant profile variations.

Adım Adım Çözüm

1
Analyze access requirements across disparate user roles
Identified that 15 users spanning different functional profiles require identical supplemental permissions.
Profiles determine baseline permissions for a role, whereas permission sets grant flexible, additive permissions.
2
Evaluate configuration options for scalability and maintainability
Determined that creating a permission set avoids modifying baseline profiles or creating redundant profile clones.
Permission sets can be assigned to users regardless of their underlying profile assignment.
3
Assign the permission set
Assigned the newly created permission set to the compliance auditors.
This adheres to the principle of least privilege and keeps administrative overhead low.

Anahtar Kavram

Using Permission Sets for Additive User Permissions
Bu soruyu puanla

Konular

User Management and Provisioning

Bu konudan daha fazla soru