(Security and Access 13%) Determine the appropriate use of a custom profile Flashcards
Standard profile
existing profiles in an org which can be assigned to users and cloned but cannot be edited
Custom Profile
can be created by cloning an existing profile. It can be fully customized based on security requirements
Profile settings
specify settings related to user’s access level for objects, apps, tabs, and page layouts
Profile Permissions
a profile can be used to grant app, system, or custom permissions to specific users within an organization
Permission Sets
are used to expand user privileges beyond what their profile allows
what two types of settings do profiles include?
app settings or system settings
custom profile
created when a profile needs to be fully customized and a standard profile does not meet the requirements
Three permission groups
App: Control what actions can be performed in different apps
Custom: grant access to custom apps or processes. Must be enabled
System: grant access to actions that are organization-wide
Any privilege that can be granted on a profile can be allocated through a permission set
True. Permission sets include most profile settings. MFA can be assigned. And Multiple users can be assigned.
One Finance manager needs access to all opportunities. Opportunities are not included in the Finance Profile
Grant access to opportunities through a permission set. It does not make sense to create a profile for one user. Permission sets can be used to grant access to objects and fields. SOLUTION
The CTO would like to restrict the ability to create and customize reports to a certain group of users
Create a custom profile by cloning the existing standard profile wherein the “Create and Customize Reports” permission should be removed. In addition, a permission set must be created to extend “Create and Customize Reports” permissions to the selected group of users.
Certain users should have the ability to import leads. They have different profiles depending on the department they are in.
Due to having different profiles, the administrator should create a permission set with the permission “Import Leads” and assign to appropriate users
The administrator is testing a new app with custom sales objects. Select users are helping to test the app as it is not ready for a general release to the entire org
The sales users can be assigned to the Minimum Access - Salesforce profile, which is a least-privilege profile that grants the Access Activities, Chatter Internal User, Lightning Console User, and View Help Link permissions. A permission set can be assigned to the users who need to view the records of a custom object.
A custom profile needs to be created and assigned to the sales users of Cosmic Travels to give them access to certain administrative and user permissions. However, the Standard User profile that will be cloned for it provides the ability to access Quotes which have been disabled in the org. The administrator would like to ensure that any features or permissions that have been disabled or are not accessible to the org are not available in the new custom profile
To meet this requirement, the Restricted Profile Cloning option can be enabled in User Management Settings. This option ensures that only the permissions accessible to the org are enabled when a profile is cloned to create a custom profile. In the new custom profile, the permissions for the Quote object would be unavailable
Restricted profile cloning
can be enabled in user management settings
