Saleforce Advanced Administrator - Security and Access (FOF June 2020)

Territory users automatically have review and edit access to the territory accounts

Territory users automatically have view and edit access to the cases related to territory accounts

The level of access to Accounts and Cases can be selected from predefined options

The level of access to the Accounts and Cases can be defined for each account

Assign the Sales Manager as a delegated administrator of dashboards

Create a permission set with the "Manage Dashboards in Public Folders" user permission and assign the Sales Manager

Add the "Manage Dashboard in Public Folders" permission to the Sales Manager user

Add the "Manage Dashboards in Public Folders" permission to the Sales Manager profile

Territory Type, Territory, Territory Model

Territory, Territory Model, Territory Type

Territory, Territory Type, Territory Model

Territory Type, Territory Model, Territory

Set the default access of the Product's object to "Public/Read/Write/Transfer" in the sharing settings

Check "Modify All Data" in the user's profile settings

Create a permission set with "Create and Edit" access enabled for the Product object and assign it to the user

Enable "Create and Edit" access in the Standard Object Permissions of the Products object for the user's profile

Depends on the account level set for the US East Territory

Access will be determined by a combination of the sharing settings and the territory settings

Depends on the owner of the account and the role hierarchy

Sam will have full access to the account

Add a custom permission to the user records required

Create a permission set for providing delete access for the required case admins

Close the existing Case Admin profile to create a "Super Case Admin" profile

Leverage Role Hierarchy

Draft

Planning

Active

Archived

Create an assignment rule based on the Type field at the US territory level

Create an assignment rule based on Type field at US territory level and mark "Apply to Child Territories"

Create an assignment rule based on the Type field at Territory Model level

Create an assignment rule based on the Type field at each state level

Multiple Assignment Rules can be defined for a territory

Assignment rules can use standard or custom account fields in the criteria definition

Assignment rules can be applied to descendant territories

Assignment rules are active as soon as they are created

All standard fields are available

All standard and custom fields are available

The fields available depend on field level security settings applicable to the user

The fields available are the same for all users

Territory assignment rules are applied again

Territory assignments do not apply on the update

Depends on the territory model setting

Depends on a setting an account page layout properties

Create and assign a permission set with "Edit" access on the Case object to the team leader

Select the "Edit" or "Modify All" access to the Case object in the profile assigned to the team leader and users

Create and assign a permission set with "Modify All" access on the Case object to the team leader

Create a custom profile with "Edit" access on the Case object and assign it to the team leader

Users with sharing access to the opportunity's account can assign any active territory

Users with sharing access to the opportunity's account can only assign the account's territory

Users without sharing access to the opportunity's account can assign any active territory

Users with sharing access to the opportunity's account cannot assign a territory manually

Any Territory in the Territory model can be assigned to the Opportunity

Only Territory administrators can assign Territories to Opportunities

Only territories assigned to the account can be assigned to the opportunity

Territory assignment rules are used to assign territories to opportunities

If all users should have read access to investment records, the Org-Wide default for the investment object can be set to Public Read Only

Manual sharing can be used to increase access to selected users to Investment records

The value of "Grant Access Using Hierarchies" for the Investment object will be inherited from the Fund object

The owner of Investment records will default to the owner of the Fund record but can be changed

Use manual sharing

Set the org-wide default setting to "Public Read Only" on the Position object and add a sharing rule to share "Position" records with all users based on the value of the status field

Set the org-wide setting to "Private" on the Position object and add criteria-based sharing rules to hare position records with all users based on the value of the status field.

Use Apex Managed Sharing

Create a custom profile and enable the custom object permissions

Use an existing standard profile that automatically has the custom object permissions enabled

Use an existing custom profile that automatically has the custom object permissions enabled

Modify a standard profile and enable the custom object permissions

The org-wide default for opportunities should be set to "Private" and manual sharing can be used to share with the roles of each division

The org-wide default for Opportunities should be set to "Private" and sharing rules can be used to share with the public groups that include members of each division.

The org-wide default for Opportunities should be set to "Private" and sharing rules can be used to share with the roles of each division

The org-wide default for Opportunities should be set to "Private" and manual sharing to share with the public groups that include members of each division

Permission sets grant access through a hierarchy

The possible Permission set settings are: Private, Public Read Only, Public Read/Write and Public Read/Write/Transfer

Users can be assigned to multiple permission sets

Permission sets give a user a baseline level of access to records

Ask users to manually share Cases with this new record type to the user

Assign a permission set to the user that includes "View All" access

Create a criteria based sharing rule

Assign a permission set to the user that includes assignment to the new record type

Use field restrictions to restrict access to the field

Use object permissions to restrict access to the Salary field

Use field level security to restrict access to the field

Remove the field from the page layout used by the profiles that should not have access to it

Ensure that the role hierarchy is set up to allow appropriate record access

Remove object permissions to the "Profit" object from all profiles except the Executive profile and ensure the role hierarchy is set up appropriately

Use sharing rules to ensure the executive level users have access to "Profit" records

This is not possible as child objects in a master-detail relationship inherit the security and org-wide default sharing settings of the parent

A sharing rule must be created

A permission set must be added to each user

Nothing, users who have the same role will share data

Manual sharing must be used each time an Opportunity is created

A field will not display on the page layout

The field will still be required

The field will be read only

An error message will appear

Create a sharing rule to grant access to members of the public group

Upgrade the role hierarchy an assign members of the group to a role at the top of the hierarchy

Update the org-wide default for accounts to "Private" and create sharing rules to provide appropriate access

Manually share each account record with members of the public group

Create a permission set and assign to all users that should have delete access

Create a custom profile that has the delete permission and assign the appropriate users that should have delete access

Add the delete permission to a permission set and assign the permission set to a public group that contains the users that should have delete access

Assigned delegated Administration permission to the users that need delete access for that object

Use the "Elevated" Administration feature

Users who aren't administrators cannot be given administrative privileges to a standard object

Use the "Defined Administration" feature

Use the "Delegated Administration" feature

Assign the HR team to a new role in the role hierarchy

Modify the standard profile currently shared by both teams

Configure field-level security on the new object for the HR team

Create a new custom profile for users on the HR team

Change the role hierarchy to reflect the project managers and employees

Use Apex Managed Sharing

Ask the employee to manually share the record each time they submit a leave request

Create a Sharing Rule

Sharing rules were removed

Members of the public groups were removed

The role of the user has changed

The profile of the user was changed

The Account owner has changed

The record type has not been set as the default record type

The record type has not been activated

The record type does not have an associated page layout

The record type has not been added to the Sales User profile

The Phone Number field is hidden via field-level security

The user has the "Modify All" permission

The phone number field is required

The user does not have the "View All" permission

Roles control record level access and is mandatory for all users

Profiles control record level access and is not mandatory for all users

Roles control object level access and is mandatory for all users

Profiles control object level and field level access and is mandatory for all users.

Use a workflow to set the default record type

Use roles to specify the default record type

Create two custom profiles with the default record type set

Create a permission set for each group of users and assign the default record type

Add a sharing rule

Change the role of the user

Ask the opportunity owner to manually share the opportunity

Add the Account Manager to the Account team with at least View access for Opportunities

Manually share the opportunity and let the account manager know