Starlight Media uses a custom object named Content_Project__c to manage media production records. The Organization-Wide Default (OWD) for Content_Project__c is set to Private. Executive management wants Regional Producers to share Read/Write access to their Content_Project__c records with assigned Finance Managers across different branches. However, corporate compliance requires that Executive Vice Presidents located above the Finance Managers in the role hierarchy do NOT automatically receive access to these shared records unless explicit permission is granted. Which TWO actions must the Salesforce Administrator take to fulfill these security requirements?
- Deselect the 'Grant Access Using Hierarchies' checkbox on the Content_Project__c custom object definition.Cevap
- Create a sharing rule to grant Read/Write access of Content_Project__c records to the Finance Managers role or public group.Cevap
- CSet the Organization-Wide Default (OWD) for Content_Project__c to Public Read-Only and use permission sets to restrict executive access.
- DCreate a custom Profile for Executive Vice Presidents that revokes Read access on the Content_Project__c object.
- EReassign Finance Managers to report directly to the System Administrator in the role hierarchy.
Cevap
The Salesforce Administrator must deselect 'Grant Access Using Hierarchies' on the custom object definition and create a sharing rule to grant Read/Write access to the Finance Managers role.
Organization-Wide Defaults define the baseline record access when users do not own a record. Setting Content_Project__c to Private prevents unauthorized access. To share records with Finance Managers, a sharing rule is required. To prevent Executive Vice Presidents higher in the role hierarchy from automatically gaining access to records shared with Finance Managers, the 'Grant Access Using Hierarchies' option on the custom object must be unchecked.
Adım Adım Çözüm
Anahtar Kavram
Role Hierarchy and Sharing Rules