A sales operations manager requests the deployment of a newly acquired AppExchange productivity package containing Lightning Web Components designed to help account managers analyze deal momentum. The administrator must install this package into the production organization and grant access strictly to a pilot group of 15 account managers, without altering security settings for non-pilot users who share the same standard sales profile. Which TWO actions should the administrator take to implement this solution following Salesforce security best practices? (Select TWO.)
- Install the AppExchange package selecting the 'Install for Admins Only' option to prevent automatic profile access assignment.Cevap
- BModify the existing standard sales profile to enable full access to the installed package components for all sales users.
- Assign the package's designated Permission Set or Permission Set License directly to the 15 pilot account managers.Cevap
- DClone the standard sales profile into a custom pilot profile, grant package access on the new profile, and reassign the pilot users.
- EConvert the AppExchange managed package into an unmanaged package before deployment to bypass profile security settings.
Cevap
The administrator should install the AppExchange package using the 'Install for Admins Only' option and assign the package's permission set directly to the pilot account managers.
When deploying AppExchange packages for a subset of users, administrators should install the package with access restricted (such as 'Install for Admins Only') and then distribute access selectively using permission sets or permission set licenses included with the package. This adheres to the principle of least privilege and prevents profile management overhead.
Adım Adım Çözüm
Anahtar Kavram
AppExchange Package Access Control and Security Best Practices