Examkin

Soru

Zorluk: OrtaRole Hierarchy and Sharing Rules

Pinnacle Aviation manages safety compliance using a custom object named Flight_Audit__c. The Organization-Wide Default (OWD) sharing setting for Flight_Audit__c is set to Private, and the administrator deselects the 'Grant Access Using Hierarchies' option for this object. A criteria-based sharing rule is configured to share high-risk audit records with a Public Group named 'Safety Reviewers'. A user assigned to the 'Safety Manager' role owns several high-risk audit records. The 'Safety Director' role sits directly above the 'Safety Manager' role in the role hierarchy. If a user in the 'Safety Director' role is not a member of the 'Safety Reviewers' Public Group, which statement correctly describes their access to these Flight_Audit__c records?

  1. They will not have access to the records owned by Safety Managers because disabling 'Grant Access Using Hierarchies' prevents vertical record access propagation up the role hierarchy.Cevap
  2. B
    They will automatically inherit Read/Write access because users in higher roles always retain access to records owned by lower roles regardless of object-level hierarchy settings.
  3. C
    They will gain access to the records because sharing rules configured for Public Groups automatically grant access to managers above any group members in the role hierarchy.
  4. D
    They must be assigned a new Profile with Modify All Data enabled because Profile settings are required to grant access when OWD is Private and hierarchy access is disabled.

Cevap

Users in the Safety Director role will not have access to the records because disabling 'Grant Access Using Hierarchies' prevents vertical access inheritance up the role hierarchy for custom objects.
For custom objects, Salesforce allows administrators to uncheck the 'Grant Access Using Hierarchies' setting. When unchecked, record access does not automatically roll up to users higher in the role hierarchy. Since the Safety Director is neither the record owner nor a member of the target Public Group receiving the sharing rule, they receive no access to the Flight_Audit__c records owned by Safety Managers.

Adım Adım Çözüm

1
Evaluate the baseline Organization-Wide Default (OWD) and custom object hierarchy setting.
The OWD for Flight_Audit__c is Private, meaning users only access records they own unless shared. 'Grant Access Using Hierarchies' is deselected.
For standard objects, hierarchy access is always enabled. For custom objects, deselecting 'Grant Access Using Hierarchies' stops users higher in the role hierarchy from automatically inheriting record access owned by or shared with subordinates.
2
Evaluate the Public Group sharing rule and role memberships.
The records are shared to the 'Safety Reviewers' Public Group, but the Safety Director is not a member of this Public Group.
Because hierarchy access is disabled on the object, access granted to a Public Group does not roll up to managers of group members.
3
Determine final effective access for the Safety Director.
The Safety Director has no implicit hierarchy access and no group sharing rule access, so they cannot access the records.
Without ownership, explicit sharing rules, or hierarchy access, the Private OWD blocks record access.

Anahtar Kavram

Impact of 'Grant Access Using Hierarchies' on Custom Object Record Access
Bu soruyu puanla

Konular

Role Hierarchy and Sharing Rules

Bu konudan daha fazla soru