Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Sharing and Visibility Designer Certification > Declarative Sharing 1 of 3 > Flashcards

Declarative Sharing 1 of 3 Flashcards

1
Q

List declarative settings found to control object and field level security

A

profiled and permsets to grant CRUD permissions to users

using profiles - defines how users access objects and data, what they can do w/in applications. One profile is assigned to each user in SF

FLS - specified in profiles or permsets allowing view or edit to standard or custom fields

PermSets - collection of settings and permissions that extend users functional access w/out changing their profiles

Access Restrictions - profile can be use to restrict users access to object and fields FLS used to restrict user access to fields

Limitations - permission in standard profiles cannot be edited. A permset can not be used to restrict users access.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Declarative Platform Security Features include:

A

Explicit Sharing:

OWD
Sharing Rules
Manual Sharing
Administrative settings in Roles and Profiles

Implicit Sharing:

between accounts and child records and for various groups of portal users

Data Encryption: Classic and Shield Platform are the 2 declarative options available for data encryption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Explicit Sharing includes

A

OWD
Sharing Rules
Manual Sharing
Administrative settings in Roles and Profiles

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Implicit Sharing includes

A

between accounts and child records and for various groups of portal users

Data Encryption: Classic and Shield Platform are the 2 declarative options available for data encryption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

List all Platform Security Features

A 
OWD
Role Hierarchy
Sharing Rules
Manual Sharing
Profiles
Permission Sets
Implicit Sharing
user & Admin Permissions
Field level security
shield platform encryption
external data source
custom permission
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

An Account Team …

A

allows a group of users to access and work together on an account record, make it easy to track collaboration on the record

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

An opportunity team …

A

allows user access to work together on an opp. give user access and makes it easier to track their roles

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Team setup includes

A

team roles and access levels

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What can be used to limit a users access who should not be able to delete the records of a particular object?

A

Profile

hint: Key work ‘delete’ ie ‘D’ in CRUD

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What can be used to restrict users access to view and edit specific field?

A

Field Level Security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How does Salesforce provide implicit sharing between accounts and child records?

A

Access to an accounts child record grants implicit read only access to that account. Access to an account grants access to the child records, but the access level depends on the account’s owners role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which type of team allows a group of sales users to work together on a particular opportunity record?

A

Opportunity Team

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which action allows account team members to view other members access level

A

team member access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What should a solution architect recommend if only one user in an organization requires access to a visualforce page?

A

permset can be created allowing access to the page and assigned to the user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which declarative options are available to grant explicit record access to users with a specific role who are unable to access records due to OWD setting

A

Role hierarchy and sharing rules

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

While defining an account team, which access levels will be available for an account if the OWD default sharing setting for the object has been set to “private’?

A

Read Only and Read/Write

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

In order to allow a group of support reps and support manager to work together on certain cases, what should be created?

A

case team

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Which object can be customized to allow users to specify custom information about account team members?

A

Account team member

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Explain the difference between a Profile and a permission set?

A

Profiles can be used to allow or limit access to DATA, permission sets only grant additional access and do not restrict access access to specific users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Object and field-level security settings can be implemented in Salesforce through the use of ?

A

profiles and permission sets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Declarative feature used to assign multiple permission sets to a user?

A

Permission set group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Permission set groups provide the these additional features.

A
  1. ) multiple groups can be assigned to a user
  2. ) permissions can be disabled or muted via a muting permission set (only 1 allowed per permset group)
  3. ) within a user setting page on the object level settings there is Enable and Muted check boxes to set each CRUD setting to muted.
  4. ) Updates in a permission set propagate to all permission set groups that include the permission set.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What defines how users access objects and data, and what they can do within the application. When you create users, you assign a profile to each one.

A

Profiles

salesforce article on profiles:
https://help.salesforce.com/articleView?id=admin_userprofiles.htm&type=5

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

collection of settings and permissions that give users access to various tools and functions. The settings and permissions in permission sets are also found in profiles, but permission sets extend users’ functional access without changing their profiles.

A

Permission sets

Salesforce article on permsets:
https://help.salesforce.com/articleView?id=perm_sets_overview.htm&type=5

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

streamlines permissions assignment and management by bundling permission sets together based on user job functions. Users assigned the permission set group receive the combined permissions of all the permission sets in the group

A

permission set group

Salesforce article on permission set groups:
https://help.salesforce.com/articleView?id=perm_set_groups.htm&type=5

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

How can you remove individual permissions form a group

A

muting feature

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Settings let you restrict users’ access to view and edit specific fields.

A

Field-level security

page layouts can be added to determine which fields a user sees, the most restrictive always applies.

salesforce article on Field level security:
https://help.salesforce.com/articleView?id=admin_fls.htm&type=5

28
Q

Access can be restrict access to …

A 
Detail and edit pages
Related lists
List views
Reports
Connect Offline
Email and mail merge templates
Custom links
The partner portal
The Salesforce Customer Portal
Synchronized data
Imported data
29
Q

Field level security can be applied two ways

A

multiple fields on a single permisison set or profile

single field on all profiles

30
Q

What approach reduces the number of page layouts for you to maintain.

A

use field level security to restrict users access to fields then use page layouts to organize detail and edit pages within tabs.

31
Q

Modify All Data and View All data

A

allows the user to make changes to all data within the SF Organization or view all the data. View all data adheres to the OWD settings.

32
Q

Reference Article:

User profile permission descriptions:
https://help.salesforce.com/articleView?id=000332385&type=1&mode=1

A 
Admin Permissions
Security Admin Permissions
User Management Permissions
Data Permissions
Import and Export Permissions
Report and Dashboard Permissions
Developer Permissions
Chatter and Communities Permissions
User Interface Permissions
Object Permissions
33
Q

This permission allows the user to view the reports tab, run reports and view dashboards based on reports

A

User permissions section = ‘Run Reports’

34
Q

This permission allow for the creations, updating and deletion of reports.

A

System permissions in the Enhanced profile user interface
Administrative permission in the standard interface

Create and Customize Reports

35
Q

Use Case:

user should be able to edit a custom field A on a custom object record during their login session on the first day of each month

A

custom object should FLS should be set as:

  • No Access of custom field A
  • Temporary edit access to custom field A
  • Create a flow to be used by an employees manger to activate the permission set for the employees session on the first day of each month
36
Q

What type of sharing automatically grantes ‘Read Only’ access to parent account associated with the case which is manually shared with a user.

A

implicit sharing

Case is manually shared which
automatically extends ‘Read Only’ access to its related account.

37
Q

What type of sharing automatically grants ‘Read Only’ access to parent account associated with the case which is manually shared with a user.

A

implicit sharing

Case is manually shared which
automatically extends ‘Read Only’ access to its related account.

38
Q

Implicit Sharing - Child defined

A

allows record owners access to view and edit contacts and cases related to account records owned by them.

If a user has access to a parent account, they also have access to the associated child records.

39
Q

Permission assigned on the user record or within a profile which provide access to all the data in the organization

A

View All Data

40
Q

Sharing type which is lost when the owner of a record changes

A

Manual Sharing

41
Q

How can user gain access to a record owned by a user higher in the role hierarchy

A

Criteria-Based Sharing Rule

42
Q

What setting prevents users from selecting a record type upon creation of a record

A

On Profile set the record type to - Master -

when this record type is assigned, users can’t set a record type while creating a record

As opposed, when any custom record type(s) is selected on the profile the user can selected only those type set on the profile.

43
Q

Page layouts can only be assigned through _____ and are not able to be set through permission sets

A

page layouts

44
Q

Security on encrypted fields can be accomplished through

A

Field Level security or

a combination of validation rules and page layout settings can be used to prevent users form editing encrypted fields

45
Q

What permissions bypass field level security on encrypted fields

A

combination of Modify All Data, Customize Application and Deploy Apex.

46
Q

What security setting will allow the body of attachments that are uploaded

A

Shield platform encryption

Only users with read access can search and view the body content

47
Q

What security setting will allow the body of attachments that are uploaded

A

Shield platform encryption

Only users with read access can search and view the body content

https://shieldlearningmap.com/

48
Q

Which setting restrict the times a certain user can log in and login from certain locations

A

Login Hours and Login IP Ranges set on the profile

49
Q

Which security permission is used to set CRUD access to external objects

A

Writable External objects setting on profiles

50
Q

Allows the ability to define access checks that can be assigned to users via permission sets and profiles (i.e. provides access to custom processes or apps)

A

Custom Permissions.

Access to a button on a VF pages
validation rule bypass by using the custom permission name ($Permission.ExampleCustomPermName = False && rest of the validation rule

51
Q

Key Points about File sharing

A

Sharing Settings
Private / Files home, publish to your private library, Make private, delete posts that includes the file
Privately Shared / specific ppl or group, posted to private group, shared via link, posted to feed on record, published in shared libarary
Company / feed all users can see, to a profile, to a record, to a public group

Actions which can be performed on a file
View/Preview (owner, Collaborator, viewer)
Download  (owner, Collaborator, viewer)
Share  (owner, Collaborator, viewer)
Attach to Post (owner, Collaborator, viewer)
New Version (owner, Collaborator)
Edit Details (owner, Collaborator)
Change Permissions (owner, Collaborator)
Make private  (owner)
restrict access  (owner)
delete  (owner)
52
Q

determine which actions a user can perform on any of the object’s
records to which they have access.

A

Read, Create, Edit and Delete (CRUD)

53
Q

prevent certain users from seeing sensitive or confidential

information contained in records they can see

A

Field level security

54
Q

determines which records a user can see for a particular object

A

Record-level access (i.e. Sharing)

 can be accomplished through
OWD
Role Hierarchy
territory hierarchy
sharing rules
teams
manual sharing
programmatic sharing
55
Q

Record access calculations only when configuration changes occur so that

A

the calculated results persist to facilitate rapid scanning and minimize the number of database table joins necessary to determine record access at run time.

56
Q

What are the four types of access grants in salesforce

A

Explicit grants
group membership grants
inherited grants
implicit grants

57
Q

Salesforce uses explicit grants when

A

user/queue becomes an owner
sharing rule shares record to user/queue
assignment rule shared record to user/queue
territory assignment rule shares to a territory
manual share record to user/personal or public group/ queue/ role or territory
user becomes part of team for account, oppty, or case
programmatic customization shares to user/ personal or public group. queue, role or territory

58
Q

Grant which occur when a user , personal or public group, queue, role or territory is a member of a group that has explicit access to a record.

A

Group membership grants

example: explicit grants example group access to Acme record, and a user is a member of the example group, user’s membership in the example group grants the user access to the Acme record

59
Q

Grants which occur when a user/ personal or public group, queue, role, or territory inherits access through a role or territory hierarchy, or is a member of a group that inherits access through a group hierarchy

A

Inherited grants

60
Q

Grants which occur when non-configurable record-sharing behaviors are built in to Salesforce grant access to certain parent and child records

A

Implicit Grants

Example
Default logic (or built in sharing , users cna view a parent account record if they have access to its child oppty, case or contact record and if a user has access to a parent account record, they also have access to its child oppty, case and contact records
61
Q

What are the three type of tables which store access grants

A

Object record tables
Object sharing tables
Group Maintenance table

62
Q

Table that store the records of a specific object and indicate which user, group, or queue owns each record

A

Object record tables

63
Q

Tables that store the data that supports explicit an implicit grants (most object in SF)

A

Object Sharing tables

64
Q

In what instances do object not have their own sharing table

A
  1. master-detail relationship. master object controls access to the detail object
  2. Both OWD settings (internal and external) are public read/write
  3. Object is a type that doesn’t support object sharing tables, such as activities or files. They have own access control mechanism
65
Q

Tables that store the data supporting group membership and inherited access grants.

A

Group maintenance tables

grants are established in advance when you crate or change the group (or role, or territory) membership information

66
Q

Which grant tables determine a users access to data when they are searching, querying, or pulling up report or list views

A

Object Sharing tables - access grants to individuals and groups

Group Maintenance tables - list of users or groups that belong to each group

Sharing and Visibility Designer Certification (5 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions