Data Security

Question 1

Manage Users

Answer 1

Every Salesforce user is identified by a username, a password, and a single profile. Together with other settings, the profile determines what tasks users can perform, what data they see, and what they can do with the data.

Question 2

Manage Object Permissions

Answer 2

The simplest way to control data access is to set permissions on a particular type of object.
ou can set object permissions with profiles or permission sets. A user can have one profile and many permission sets.
A user’s profile determines the objects they can access and the things they can do with any object record (such as create, read, edit, or delete).
Permission sets grant additional permissions and access settings to a user.

Question 3

Profiles to Restrict Access

Answer 3

Each user has a single profile that controls which data and features that user has access to. A profile is a collection of settings and permissions. Profile settings determine which data the user can see, and permissions determine what the user can do with that data.

Question 4

Standard Profiles

Answer 4

The platform includes a set of standard profiles. Some examples are:

Read Only
Standard User
Marketing User
Contract Manager
System Administrator
Each standard profile includes a default set of permissions for all standard objects available on the platform.
You can’t edit the object permissions on a standard profile.

Question 5

using permission sets for two general purposes

Answer 5

Grant access to custom objects or apps.

Grant permissions to specific fields.

Question 6

simplest way to control data access

Answer 6

is to set permissions on a particular type of object.

Question 7

A user’s profile determines

Answer 7

the objects they can access and the things they can do with any object record (such as create, read, edit, or delete).

Question 8

Profiles to Restrict Access

Answer 8

Each user has a single profile that controls which data and features that user has access to. A profile is a collection of settings and permissions. Profile settings determine which data the user can see, and permissions determine what the user can do with that data.

Question 9

Permission Sets

Answer 9

A permission set is a collection of settings and permissions that give users access to various tools and functions. The settings and permissions in permission sets are also found in profiles, but permission sets extend users’ functional access without changing their profiles.

Question 10

Managing Permission Sets

Answer 10

A permission set’s overview page is the entry point for all of the permissions in a permission set. To open a permission set overview page, find Permission Sets in Setup, then select the permission set you want to view. In each permission set, permissions and settings are organized into app settings, system settings, object permissions, and field permissions

Question 11

Record-Level Security

Answer 11

Record access determines which individual records users can view and edit in each object they have access to in their profile.

Question 12

Basis of visibility and access for any type of data

Answer 12

A user’s baseline permissions on any object are determined by their profile.
If the user has any permission sets assigned, these also set the baseline permissions in conjunction with the profile.
Access to records a user does not own are set first by the org-wide defaults.
If the org-wide defaults are anything less than Public Read/Write, you can open access back up for certain roles using the role hierarchy.
You can use sharing rules to expand access to additional groups of users.
Each record owner can manually share individual records with other users by using the Share button on the record.

Question 13

Org-Wide Sharing

Answer 13

Org-wide defaults specify the baseline level of access that the most restricted user should have.

Question 14

sharing rule components

Answer 14

Share which records?
With which users?
What kind of access?

Question 15

Share which records

Answer 15

Criteria-based sharing rules determine what records to share based on field values other than ownership.

Question 16

With which users

Answer 16

define groups of users by role or by defining a public group. -
individual users
roles
roles and subordinates
other public groups

Question 17

What kind of access?

Answer 17

You can assign either Read-Only or Read/Write access.

Question 18

Public Group

Answer 18

A public group is a collection of individual users, other groups, individual roles, and/or roles with their subordinates that all have a function in common.
Create a public group if you want to define a sharing rule that encompasses more than one or two groups or roles, or any individual.