Examkin

Soru

Zorluk: OrtaProfiles and Object/Field-Level Security

Horizon Cloud Logistics uses Salesforce to manage support operations. The System Administrator is tasked with restricting access to a confidential custom field, Internal_Notes__c, on the Case object. Users assigned to the Customer Support Specialist profile must not be able to view or edit this field in page layouts, reports, or via API integrations. However, two senior escalation managers who are also assigned to the Customer Support Specialist profile require full read and edit access to this field. Which configuration strategy should the System Administrator implement to meet this requirement?

  1. Set the Field-Level Security for Internal_Notes__c to hidden (deselect Visible and Read-Only) on the Customer Support Specialist profile, create a Permission Set that grants Read and Edit access to Internal_Notes__c, and assign the Permission Set to the two senior escalation managers.Cevap
  2. B
    Remove the Internal_Notes__c field from the Case Page Layout assigned to Customer Support Specialists, and use Dynamic Forms component visibility rules to show the field only to the two senior escalation managers.
  3. C
    Clone the Customer Support Specialist profile to create a new profile with Read and Edit access to Internal_Notes__c, and reassign all users except the two senior escalation managers to a restricted custom profile.
  4. D
    Define Profile Login IP Ranges on the Customer Support Specialist profile to include the IP addresses of the two senior escalation managers so that the Internal_Notes__c field is revealed upon login.

Cevap

Set the Field-Level Security for Internal_Notes__c to hidden on the Customer Support Specialist profile, create a Permission Set that grants Read and Edit access to Internal_Notes__c, and assign the Permission Set to the two senior escalation managers.
Field-Level Security (FLS) provides robust security by controlling field visibility across all entry points, including reports, list views, global search, and API queries. Setting FLS to hidden on the profile restricts access for all standard users on that profile. Using a Permission Set to grant Read and Edit access to the two senior escalation managers adheres to Salesforce best practices by keeping access management additive and modular.

Adım Adım Çözüm

1
Determine the broad access boundary
Identify that access to Internal_Notes__c must be restricted across UI, reports, and API.
Field-Level Security (FLS) is the authoritative security mechanism to enforce field restrictions across all access vectors.
2
Configure base profile restrictions
Deselect Visible and Read-Only for Internal_Notes__c on the Customer Support Specialist profile.
This establishes a restrictive baseline for all users assigned to that profile.
3
Grant additive access using a Permission Set
Create a Permission Set with Read and Edit access enabled for Internal_Notes__c and assign it strictly to the two senior escalation managers.
Permission Sets follow the principle of additive permissions, allowing access expansion without creating redundant profiles.

Anahtar Kavram

Field-Level Security enforcement and additive access via Permission Sets
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Profiles and Object/Field-Level Security

Bu konudan daha fazla soru