Examkin

Soru

Zorluk: ZorUser Management and Provisioning

A Salesforce Administrator at a global manufacturing organization needs to provision system access for 50 newly hired field service technicians. All technicians require base read and edit permissions on Cases and Assets. However, five of these technicians act as regional shift leads and additionally require elevated permissions to create and publish Salesforce Knowledge articles. Company policy requires enforcing the principle of least privilege while minimizing long-term administrative maintenance. Which configuration strategy should the administrator use to provision these users?

  1. Assign all 50 technicians a single base profile for field service staff, and assign a Permission Set granting Knowledge creation and publishing capabilities to the five regional shift leads.Cevap
  2. B
    Create two separate custom profiles—one for base technicians and one for shift leads with Knowledge management permissions—and assign each user to their respective profile.
  3. C
    Assign all 50 technicians a profile with Knowledge management permissions enabled, and configure Organization-Wide Login IP Ranges to restrict non-lead technicians from creating Knowledge articles.
  4. D
    Assign all technicians a base profile, then freeze the user accounts of non-lead technicians whenever Knowledge management actions are being processed in the organization.

Cevap

Assigning a single base profile to all technicians and granting additional Knowledge management capabilities to shift leads via a Permission Set satisfies least privilege and minimizes profile maintenance.
The correct approach assigns a shared base profile to all technicians for common Case and Asset access, while leveraging a Permission Set to grant Knowledge article management permissions to the shift leads. This adheres to Salesforce best practices by using profiles for baseline functional access and permission sets for additive access.

Adım Adım Çözüm

1
Analyze core access requirements shared by all 50 technicians
Identify Case and Asset read/edit capabilities as the common baseline baseline requirement.
Profiles should define baseline access shared by a job function.
2
Evaluate access requirements unique to the sub-group of shift leads
Identify Knowledge article creation and publishing as supplementary permissions.
Additive capabilities needed by a fraction of users should be granted via Permission Sets rather than cloning or proliferating profiles.
3
Select the optimal provisioning model
Assign one baseline profile to all 50 users and assign the Permission Set to the 5 shift leads.
This setup adheres to least privilege and maintains low administrative complexity.

Anahtar Kavram

Profile baseline access vs additive Permission Set provisioning
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

User Management and Provisioning

Bu konudan daha fazla soru