Examkin

Soru

Zorluk: Çok zorPermission Sets and Permission Set Groups

Northern Trail Outfitters has configured a Permission Set Group named 'Sales_Ops_Group' containing three Permission Sets: 'Sales_Core_Access', 'Contract_Management' (which includes Create, Read, Edit, and Delete access on a custom Contract object), and 'Reporting_Admin'. Due to a regulatory update, a specific subset of users assigned to 'Sales_Ops_Group' must perform Create, Read, and Edit operations on the custom Contract object, but must be restricted from deleting custom Contract records. All other users in the group must retain full Delete access. What is the most efficient, scalable configuration to achieve this requirement without creating redundant standalone Permission Sets?

  1. Create a secondary Permission Set Group for the restricted users, include the same three Permission Sets, and add a Muting Permission Set within the new group that suppresses Delete access on the custom Contract object.Cevap
  2. B
    Clone the standard Sales User profile to create a Compliance Sales Profile, assign it to the restricted users, and disable the Delete object permission on the custom Contract object at the profile level.
  3. C
    Open the standalone 'Contract_Management' Permission Set, add a Muting Permission Set directly to its settings to revoke Delete access, and assign it to the restricted users.
  4. D
    Modify the Organization-Wide Defaults (OWD) for the custom Contract object to Private and rely on dynamic form component visibility to hide the Delete button for restricted users.

Cevap

Create a secondary Permission Set Group for the restricted users, include the existing Permission Sets, and add a Muting Permission Set within that group to suppress Delete permissions on the custom Contract object.
Muting Permission Sets are designed to mute or suppress permissions (such as Object Delete) inside a specific Permission Set Group. By creating a dedicated Permission Set Group for the restricted user subset, you can reuse existing Permission Sets ('Contract_Management', 'Sales_Core_Access', 'Reporting_Admin') and add a Muting Permission Set to revoke Delete access on the custom Contract object for users in that group only.

Adım Adım Çözüm

1
Analyze access requirements across user cohorts
Identify that cohort 1 requires full CRUD on custom Contracts, while cohort 2 requires CRE (without Delete).
Permission Set Groups aggregate permissions, but muting permissions apply to all users assigned to that specific group.
2
Evaluate Muting Permission Set capabilities
Determine that a Muting Permission Set resides inside a Permission Set Group and mutes explicit permissions granted by member permission sets.
To avoid duplicating individual Permission Sets ('Contract_Management'), a new Permission Set Group can reuse the existing Permission Sets and apply a Muting Permission Set exclusively to the restricted cohort.
3
Construct the scalable solution
Create a new Permission Set Group containing 'Sales_Core_Access', 'Contract_Management', and 'Reporting_Admin', then insert a Muting Permission Set that disables Delete access on the custom Contract object. Assign restricted users to this new group.
This maintains modular Permission Sets while allowing targeted access suppression without modifying base profiles or duplicating permission sets.

Anahtar Kavram

Permission Set Groups and Muting Permission Sets
Bu soruyu puanla

Konular

Permission Sets and Permission Set Groups

Bu konudan daha fazla soru