Configuration and setup III (20%) Flashcards
How do you create a new user in salesforce. And then what happens when you create one?
setup>users>new
- account verification link will be sent via email
- a password is created
- a security question is created
Why are user licenses required and what’s the difference b/w feature and user licenses to grant access to features
user licenses are required because you have to determine the level of access to the org and which profiles can be selected.
feature licenses entitle users to access additional features not included with the user license.
How can multiple users be added to salesforce.
How many can you add at once
consideration before you do it in respect to licenses and what could be a work around to that consideration
You can add multiple users at one time (up to 10)
setup>users>add multiple users
they all will be assigned the same license
to create more at a time you’ll need to use the data loader application.
What is the use of login history to troubleshoot login issues
Login history pages provides information on past login attempts.
Examples
Login status: Indicates success or reason for failure
Identify the options for resetting passwords and what if the administrator needs to reset multiple at once
It can be reset by themselves or by the administrator.
administrator can reset multiple accounts at once
How can an administrator unlock or unfreeze and account
from the users detail page
What is freezing a user
its what done to prevent users access to the org
What are the considerations related to user deactivation?
It takes time to do so if the user is involved in a lot of processes, in the mean time they can be frozen, until that is handled.
What is the use of delegated administration groups?
Can be created to help administrators spread out certain tasks.
How can an Admin log in as another user?
setup>login access> “Make sure that enabled> go to any user profile
What are some of the most common user access issues?(
passwords are case-sensitive, wrong username, locked due to too many failed login attempts, wrong URL, IP restrictions, outside of login hours, account not verified, sandbox url
What are the required fields for user creation? (8)
Last Name, Alias, Nickname, Email, username, user license, profile
Permission set vs permission set licenses
Permission set licenses, you can assign more permissions to users than their user license supports.
Permission sets extend users’ functional access without changing their profiles.
Can a user be deleted?
No users are permanent, their records cannot be deleted
what is the failed login attempts section on the user detail section mean?
how many failed login attempts they have, once you reach the limit you’re locked out and have to have at least one successful login the number resets to 0
when would you freeze a user?
when deactivating them isn’t an immediate option
how does freezing an account affect the license?
It doesn’t, for a license to be available the user must be deactivated
what can users in a delegated group do?
manage users, manage permission sets, unlock and reset passwords, assign profiles, manage custom objects, create public groups
How does Setup Audit Trail work to monitor setup changes?
Helps track the recent setup changes that admins have made to their org, Shows 20 most recent setup changes. Shows: date of change, who made it, and what the change was
How do you use password policies to implement restrictions related to password requirements
by creating settings that govern the login and password rules for all users in your org
What are the different types of user authentication
Single Sign-On
Multi-Factor Authentication
What level can you set login hours
at the profile level but not at the org level
what is device activation
Acts as a second form of user authentication. its triggered when a user log in from an un recognized browser or device. browser wont be asked again unless cookies have been cleared
what is login forensics and what does it allow for
Allows salesforce admins to monitor login behavior and keep a sales org secure.
-Things you can monitor-
+ Suspicious login activity,
+ Who logged in more than the average number of times
+ Average number of logins per user per a specified time period
+ Who logged in during business hours,
+ Who logged in using suspicious IP ranges
what is security health check
where do you set it up
Helps in identifying, and fixing potential vulnerabilities in key areas of the security settings.
setup>health check
Where does Fields, and Page Layouts security level fall under?
Field level security
What are some of the password policies
Password can’t contain a user’s username, and can’t match a users first or last name.
Password must contain at least eight characters including one alphabetic character and one number.
Security Question answer can’t contain the user’s password.
When users change their password, they cannot reuse their last three passwords
at what level can passwords policies be set at?
and what overrides what
organization or profile level
Profile password policies override the Organization-wide password policies for that profile’s users
What are some of the password policies
Password can’t contain a user’s username, and can’t match a users first or last name.
Password must contain at least eight characters including one alphabetic character and one number.
Security Question answer can’t contain the user’s password.
When users change their password, they cannot reuse their last three passwords
passwords expire for all users the default is after 90 days but this can be changed
How does single sign-on work?
allows users in the org to login to salesforce and other applications using single user credentials.
What options are available for implementing single sign-on capability to simplify and standardize user authentication?
Federated authentication and delegated authentication
Federated authentication
Allows for affiliated but unrelated web services to share authentication data.
automatically enabled for an org
Delegated authentication
allows for the usage of preferred authentication provider.
stronger form of user authentication and makes the login page private and accessible only behind a corporate firewall
org-wide session settings
are settings that configure the session time while your online
session timeout
can be configured to log out inactive users after the specified length of time. or can force sessions time out at a specified time.