User management - controlling users access

Question 1

What are the four levels of data access ?

Answer 1

org(highest level of data access)
objects
field
records

Question 2

how can you manage record level data access?

Answer 2

roles(hierarchies)
manual sharing
sharing rules
org wide default

Question 3

what the highest level, you can SECURE DATA access to your organization

Answer 3

by maintaining a list of authorized users,
setting password policies,
and limiting login access to certain hours and certain locations.

Question 4

Before configuring record access, what consideration should you take?

Answer 4

Should your users have open access to every record, or just a subset?
If it’s a subset, what rules should determine whether the user can access them?

Question 5

The permissions on a record are always evaluated according to a combination of what 3 levels of permissions?

Answer 5

object–,
field–,
record–level permissions.

Question 6

When object– versus record–level permissions conflict, ——————- win.

Answer 6

the most restrictive settings

Question 7

organization–wide defaults are the defaults that specify the baseline level of access that users have to _____________that they don’t own

Answer 7

records

Question 8

Configure your organization–wide defaults for most restricted USER is allowed to access. Then use other _________________ (role hierarchies, sharing rules, and manual sharing) to open up the data to other users who need to access it.

Answer 8

other record–level security and sharing tools

Question 9

You can specify the default level of access to records for each type of __________ or _______object.

Answer 9

standard or custom

Question 10

You can never use organization–wide defaults to grant users __________ access than they have through their object permission.

Answer 10

MORE

Question 11

To determine the organization–wide defaults for each object. consider…

Answer 11

Who is the most restricted user of this object?
Is there ever going to be an instance of this object that this user shouldn’t be allowed to see?
Is there ever going to be an instance of this object that this user shouldn’t be allowed to edit?

Question 12

the sharing model for an object can be set to one of four settings for the field

Answer 12

Private
Public Read Only
Public Read/Write
Controlled by Parent

Question 13

when a sharing model field of an object is set to Private what actions can an non record owner do?

Answer 13

Only the record owner, and users above that role in the hierarchy, can view, edit, and report on those records.

Question 14

when a sharing model field of an object is set to Public Read Only what actions can an non record owner do?

Answer 14

All users can view and report on records but not edit them. Only the owner, and users above that role in the hierarchy, can edit those records.

Question 15

when a sharing model field of an object is set to Public Read/Write what actions can an non record owner do?

Answer 15

All users can view, edit, and report on all records.

Question 16

when a sharing model field of an object is set to Controlled by Parent what actions can an non record owner do?

Answer 16

A user can perform an action (such as view, edit, or delete) on a contact based on whether he or she can perform that same action on the record associated with it.

Question 17

When the organization–wide sharing setting for an object as Private or Public Read Only, you can grant users more access to records by setting up ______

Answer 17

a role hierarchy or defining sharing rules

Question 18

Sharing rules can only grant ____ access—they cannot be used to _____ access to records beyond what was originally specified with the organization–wide sharing defaults.

Answer 18

more

restrict

Question 19

The ____________ Employee profile is the most restricted user for each object

Answer 19

standard

Question 20

the Review object is automatically set to ________

Answer 20

Private

Question 21

You can’t set the organization–wide defaults for the Review object. This is because that object is on the detail side of a master–detail relationship, and, a detail record automatically inherits the sharing setting of

Answer 21

its parent.

Question 22

where is the Organization-Wide Sharing Defaults located?

Answer 22

From Setup, enter Sharing Settings in the Quick Find box, then select Sharing Settings.

Question 23

By default, Salesforce uses ———————–to automatically grant record access to users above the record owner in the hierarchy.

Answer 23

hierarchies, like a role hierarchy,

Question 24

Setting an object to Private makes those records visible only to ———————–

Answer 24

record owners and users above them in the role hierarchy.

Question 25

If you want to enable access to records for users above the record owner in the hierarchy for custom objects, use the Grant——————–

Answer 25

Access Using Hierarchies checkbox.

Question 26

If you deselect the “Grant Access Using Hierarchies” checkbox. for a custom object, you restrict record access to only ——————-

Answer 26

the record owner and users granted access by the organization–wide defaults.

Question 27

Deselecting “Grant Access Using Hierarchies,” users that are higher in the role hierarchy don’t receive ______________

Answer 27

automatic access.

Question 28

Users can in hierarchies still access records they don’t own by default (if Deselecting “Grant Access Using Hierarchies,” )—such as users with the “————————————————— system permissions.

Answer 28

View All” and “Modify All” object permissions and the “View All Data” and “Modify All Data”

Question 29

Updating the organization-wide defaults causes a sharing___________ to run automatically and apply any access changes to your records.

Answer 29

recalculation

Question 30

After sharing recalculation, refresh the Sharing Settings page to see your changes to see the updated status by going to To

Answer 30

view the updated status, from Setup, enter View Setup Audit Trail in the Quick Find box, then select View Setup Audit Trail.