Configuration and setup III (20%) Flashcards

1
Q

How do you create a new user in salesforce. And then what happens when you create one?

A

setup>users>new

  1. account verification link will be sent via email
  2. a password is created
  3. a security question is created
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Why are user licenses required and what’s the difference b/w feature and user licenses to grant access to features

A

user licenses are required because you have to determine the level of access to the org and which profiles can be selected.

feature licenses entitle users to access additional features not included with the user license.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How can multiple users be added to salesforce.
How many can you add at once
consideration before you do it in respect to licenses and what could be a work around to that consideration

A

You can add multiple users at one time (up to 10)
setup>users>add multiple users
they all will be assigned the same license

to create more at a time you’ll need to use the data loader application.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the use of login history to troubleshoot login issues

A

Login history pages provides information on past login attempts.

Examples
Login status: Indicates success or reason for failure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Identify the options for resetting passwords and what if the administrator needs to reset multiple at once

A

It can be reset by themselves or by the administrator.

administrator can reset multiple accounts at once

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How can an administrator unlock or unfreeze and account

A

from the users detail page

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is freezing a user

A

its what done to prevent users access to the org

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are the considerations related to user deactivation?

A

It takes time to do so if the user is involved in a lot of processes, in the mean time they can be frozen, until that is handled.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the use of delegated administration groups?

A

Can be created to help administrators spread out certain tasks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How can an Admin log in as another user?

A

setup>login access> “Make sure that enabled> go to any user profile

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are some of the most common user access issues?(

A

passwords are case-sensitive, wrong username, locked due to too many failed login attempts, wrong URL, IP restrictions, outside of login hours, account not verified, sandbox url

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the required fields for user creation? (8)

A

Last Name, Alias, Nickname, Email, username, user license, profile

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Permission set vs permission set licenses

A

Permission set licenses, you can assign more permissions to users than their user license supports.

Permission sets extend users’ functional access without changing their profiles.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Can a user be deleted?

A

No users are permanent, their records cannot be deleted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

what is the failed login attempts section on the user detail section mean?

A

how many failed login attempts they have, once you reach the limit you’re locked out and have to have at least one successful login the number resets to 0

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

when would you freeze a user?

A

when deactivating them isn’t an immediate option

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

how does freezing an account affect the license?

A

It doesn’t, for a license to be available the user must be deactivated

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

what can users in a delegated group do?

A

manage users, manage permission sets, unlock and reset passwords, assign profiles, manage custom objects, create public groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

How does Setup Audit Trail work to monitor setup changes?

A

Helps track the recent setup changes that admins have made to their org, Shows 20 most recent setup changes. Shows: date of change, who made it, and what the change was

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

How do you use password policies to implement restrictions related to password requirements

A

by creating settings that govern the login and password rules for all users in your org

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are the different types of user authentication

A

Single Sign-On

Multi-Factor Authentication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What level can you set login hours

A

at the profile level but not at the org level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

what is device activation

A

Acts as a second form of user authentication. its triggered when a user log in from an un recognized browser or device. browser wont be asked again unless cookies have been cleared

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

what is login forensics and what does it allow for

A

Allows salesforce admins to monitor login behavior and keep a sales org secure.

-Things you can monitor-

+ Suspicious login activity,
+ Who logged in more than the average number of times
+ Average number of logins per user per a specified time period
+ Who logged in during business hours,
+ Who logged in using suspicious IP ranges

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
what is security health check | where do you set it up
Helps in identifying, and fixing potential vulnerabilities in key areas of the security settings. setup>health check
26
Where does Fields, and Page Layouts security level fall under?
Field level security
27
What are some of the password policies
Password can't contain a user's username, and can't match a users first or last name. Password must contain at least eight characters including one alphabetic character and one number. Security Question answer can't contain the user's password. When users change their password, they cannot reuse their last three passwords
28
at what level can passwords policies be set at? and what overrides what
organization or profile level Profile password policies override the Organization-wide password policies for that profile's users
29
What are some of the password policies
Password can't contain a user's username, and can't match a users first or last name. Password must contain at least eight characters including one alphabetic character and one number. Security Question answer can't contain the user's password. When users change their password, they cannot reuse their last three passwords passwords expire for all users the default is after 90 days but this can be changed
30
How does single sign-on work?
allows users in the org to login to salesforce and other applications using single user credentials.
31
What options are available for implementing single sign-on capability to simplify and standardize user authentication?
Federated authentication and delegated authentication
32
Federated authentication
Allows for affiliated but unrelated web services to share authentication data. automatically enabled for an org
33
Delegated authentication
allows for the usage of preferred authentication provider. stronger form of user authentication and makes the login page private and accessible only behind a corporate firewall
34
org-wide session settings
are settings that configure the session time while your online
35
session timeout
can be configured to log out inactive users after the specified length of time. or can force sessions time out at a specified time.
36
session locking
sessions can be locked to the IP address for which they originated or the domain in which they were first used. This helps prevent unauthorized hijacking of a live session
37
Session Security Levels
access to certain types of resources can be restricted based on the security level (standard or high assurance)
38
High assurance sessions
Are meant for operations that require a higher level of security for sensitive data. Policies can be set to require high assurance security level reports, dashboards, and connected apps
39
What is IP restrictions and where can it be specified at
Is a way to control access to salesforce organization. It can be set at the profile level and the organization level
40
what must be true in order for a use to login without verifying identity?
If inside trusted IP for org and profile, and Within login hours,
41
Verification is done via the highest priority verification method available list them from highest to lowest
salesforce authenticator mobile app> U2F security Key > One-Time Password Generator>SMS Text Message>Email
42
what are the percentages associated with every risk level in health check?
Urgent: 0-33% High Risk/Medium risk: 34%-66% Acceptable: 67%-100%
43
My Domain Capabilities
allows for the addition of a subdomain allows for highlighting the brand allows for SSO replaces URL
44
What do profiles determine?
Object access and permissions Object: which objects a user can access Permissions: what those users can do with the records of that object. can be set to; Create, Read, Edit, Delete, View All/Modify All
45
OWD determines access to what?
to users' data for records they do NOT own
46
Considerations to take into account when decreasing or increasing OWD default access
when increasing access it will take effect immediately, when decreasing access it will take some time for salesforce to re-calculate use access.
47
OWD sharing defaults: What does Public read/write/transfer mean?
users can view, edit, and change ownership ( only for leads and cases )
48
OWD sharing defaults: What does Public Read/Write mean?
Allows users to view and edit other users records
49
OWD sharing defaults: What does Public Read only mean?
Allows for users to view other users records but not edit
50
OWD sharing defaults: What does Private mean?
User cannot see other users records unless it is shared or if the user above the record owner in the role hierarchy
51
OWD sharing defaults: What does controlled by parent mean?
Users can preform an action based on if they can perform the action on the parent object. Example: contact actions are controlled by the actions available on an account
52
Campaign: Public full access
User can view, edit, transfer, delete and report on all campaign records
53
Campaign Member: Controlled by Campaign
Only users who have access to the campaign are able to see the details of the campaign members related to the campaign
54
Campaign Member: Controlled by Campaign Member
Users can only see the campaign members whose lead or contact records they already have access to.
55
what is the order of record access levels from most restrictive to least
1. Access to objects is first defined at the object level for a user profile for records a user owns 2. OWD settings open up access to records the user does not own for specific objects 4. Role hierarchy 3. sharing rules open up record access to users whos OWD settings are set to anything more restrictive than Public Read/Write 4. Individual records can then be manually shared
56
what are the record access levels from most restrictive to least
* Object*: Profile object permissions and permission sets * OWD settings*: Determines access to record a user does not own * Role hierarchies* * Sharing Rules*: access is granted based on record owner or criteria * Manual Sharing*: Users can manually share records with other users
57
What is field level security
controls the visibility to data within records at the field level
58
What is Role hierarchy
Grants access to records to users that have a role above the record owner
59
What is manager group access?
Allows users to share records up and down their management chain
60
Manual sharing
Allows for users to share records with other users on a one-off basis
61
how do you make the sharing button visible on user detail pages
Sharing settings> Edit> Scroll to the bottom and check manual user record sharing
62
how to you enable manual sharing button?
setup>sharing settings>edit>all the way down
63
sharing rules
extend the access that have been established via OWD and role hierarchy
64
what is a users access to reports and dashboards determined by?
combination of user permissions
65
User Permissions for Reports & Dashboards: Run Reports
Allows users to run reports
66
User Permissions for Reports & Dashboards: Schedule Reports
Allows users to schedule reports
67
User Permissions for Reports & Dashboards: Subscribe to dashboards
Allows users to subscribe to dashboards
68
User Permissions for Reports & Dashboards: Report Builder
Allows users to create, edit, and delete reports in public and private folders
69
User Permissions for Reports & Dashboards: Create and customize reports
Allows users to create, edit, and delete reports in the 'my personal custom reports' folder
70
User Permissions for Reports & Dashboards: Create and customize dashboards
Allows a user to create, edit, and delete reports in the 'My Personal custom Dashboards'
71
User Permissions for Reports & Dashboards: Manage reports in public folders
When this permission is assigned, a user can create, edit, and delete reports and manage their sharing in all public report folders
72
User Permissions for Reports & Dashboards: Manage Dashboards in public folders
When this permission is assigned, a user can create, edit, and delete dashboards, and manage their sharing in all public dashboard folders
73
how can reports and dashboards shared?
through enhanced folder sharing
74
Public groups
can be used in an organization and may contain specific users, users in particular roles or territories used for sharing rules, folder access sharing records etc.
75
who can create public groups?
only admins
76
How can reports and dashboards shared?
through enhanced folder sharing
77
How do you enable manager groups?
setup> share settings> manager groups
78
Access to reports and dashboards are determined by the access level of what?
the folders in which their contained in.
79
What is the viewer access level for folders allow for?
for a user to view reports and dashboards
80
What is the editor access level for folders allow for?
Allows a user to do what a viewer can do, but they can also save, delete, or rename a report or dashboard inside the folder
81
What is the manager access level for folders allow for?
Allows a user to do what an editor can do, but they can also share or delete a folder, change the folders name, and change the folders sharing settings
82
what is a standard profile?
Standard profiles are existing profiles in an org which can be assigned to users and cloned but cannot be edited
83
what is a custom profile?
Profile that can be created by cloning an existing profile. It can be fully customized based on security requirements
84
what are the two types of settings for profiles?
app settings: include settings that are specific to app and objects system settings: Include settings that apply to all apps such as security settings and overall data visibility.
85
what are 6 standard profiles?
Standard user, Contract manager, Minimum Access - Salesforce, Marketing User, Solution Manager, System Administrator
86
what are the three permission categories in salesforce
App Permissions: control what actions can be performed in different apps. Custom Permissions: must be enabled, they're used to grant access to custom apps or processes System Permissions: grant access to actions that are org-wide
87
What are permission sets used for?
to expand user privileges beyond what their profile allows
88
What are permission sets used for?
to expand user privileges beyond what their profile allows
89
Permission set group
groups permission sets together, so you don't have to assign individual sets to a group one by one