Podcast
Questions and Answers
What is the primary role of a user license in Salesforce?
What is the primary role of a user license in Salesforce?
Which user license allows maximum access to all Salesforce products?
Which user license allows maximum access to all Salesforce products?
How can an organization verify its total and consumed user licenses?
How can an organization verify its total and consumed user licenses?
What can a user with a Salesforce Platform license access?
What can a user with a Salesforce Platform license access?
Signup and view all the answers
What happens if an organization needs more user licenses after the initial purchase?
What happens if an organization needs more user licenses after the initial purchase?
Signup and view all the answers
What is the main function of the permissions granted through a user's profile?
What is the main function of the permissions granted through a user's profile?
Signup and view all the answers
What limitation applies to free environments like Trailhead Playground regarding user licenses?
What limitation applies to free environments like Trailhead Playground regarding user licenses?
Signup and view all the answers
Which of the following statements is true regarding user licenses?
Which of the following statements is true regarding user licenses?
Signup and view all the answers
What does org level security primarily deal with?
What does org level security primarily deal with?
Signup and view all the answers
Which of the following settings controls the times that users can log in to Salesforce?
Which of the following settings controls the times that users can log in to Salesforce?
Signup and view all the answers
What is the function of Trusted IP Ranges in Salesforce?
What is the function of Trusted IP Ranges in Salesforce?
Signup and view all the answers
How can password settings be configured in Salesforce?
How can password settings be configured in Salesforce?
Signup and view all the answers
What happens if a user attempts to log in outside their designated Login Hours?
What happens if a user attempts to log in outside their designated Login Hours?
Signup and view all the answers
What is Multi-Factor Authentication (MFA) primarily used for?
What is Multi-Factor Authentication (MFA) primarily used for?
Signup and view all the answers
Which of the following is NOT a part of org level security in Salesforce?
Which of the following is NOT a part of org level security in Salesforce?
Signup and view all the answers
How are IP Ranges set in Salesforce?
How are IP Ranges set in Salesforce?
Signup and view all the answers
To enforce MFA for all users in the organization, you can enable which setting?
To enforce MFA for all users in the organization, you can enable which setting?
Signup and view all the answers
Which of the following options controls how often a user's password must be reset?
Which of the following options controls how often a user's password must be reset?
Signup and view all the answers
What is the consequence of too many incorrect login attempts?
What is the consequence of too many incorrect login attempts?
Signup and view all the answers
What does the 'End Time' need to be set to prevent a user from logging in on a given day?
What does the 'End Time' need to be set to prevent a user from logging in on a given day?
Signup and view all the answers
What additional authentication methods can be used for MFA?
What additional authentication methods can be used for MFA?
Signup and view all the answers
What is the primary purpose of field level security in Salesforce?
What is the primary purpose of field level security in Salesforce?
Signup and view all the answers
Which access level allows a user to only view, but not edit, a field?
Which access level allows a user to only view, but not edit, a field?
Signup and view all the answers
Which configuration is NOT possible in field level security?
Which configuration is NOT possible in field level security?
Signup and view all the answers
What resource can be used to adjust field level security settings for existing fields?
What resource can be used to adjust field level security settings for existing fields?
Signup and view all the answers
How can users gain access to records in Salesforce?
How can users gain access to records in Salesforce?
Signup and view all the answers
If a user has no access to a field, what can they do?
If a user has no access to a field, what can they do?
Signup and view all the answers
Which of the following fields has fixed access that cannot be changed?
Which of the following fields has fixed access that cannot be changed?
Signup and view all the answers
What does Read and Edit access allow a user to do?
What does Read and Edit access allow a user to do?
Signup and view all the answers
What impact does field level security have on object level and record level security?
What impact does field level security have on object level and record level security?
Signup and view all the answers
Which of the following describes the role of a profile in field level security?
Which of the following describes the role of a profile in field level security?
Signup and view all the answers
If a profile has the 'Visible' checkbox selected but not 'Read-Only', what level of access is granted?
If a profile has the 'Visible' checkbox selected but not 'Read-Only', what level of access is granted?
Signup and view all the answers
What type of fields cannot have edit access granted due to their nature?
What type of fields cannot have edit access granted due to their nature?
Signup and view all the answers
What does the 'Edit Read Only Fields' permission allow users to do?
What does the 'Edit Read Only Fields' permission allow users to do?
Signup and view all the answers
To which fields does the read-only limitation NOT apply?
To which fields does the read-only limitation NOT apply?
Signup and view all the answers
What determines the maximum capabilities of a user in Salesforce?
What determines the maximum capabilities of a user in Salesforce?
Signup and view all the answers
What is the primary difference between a permission set license and a feature license?
What is the primary difference between a permission set license and a feature license?
Signup and view all the answers
Which statement about user licenses is true?
Which statement about user licenses is true?
Signup and view all the answers
How does a permission set license operate within Salesforce?
How does a permission set license operate within Salesforce?
Signup and view all the answers
What do user interface profile settings primarily control?
What do user interface profile settings primarily control?
Signup and view all the answers
Which of the following is NOT a possible tab setting for a profile?
Which of the following is NOT a possible tab setting for a profile?
Signup and view all the answers
What is required for a user to perform actions allowed by a permission set license?
What is required for a user to perform actions allowed by a permission set license?
Signup and view all the answers
What does the 'Customize Application' permission allow users to do?
What does the 'Customize Application' permission allow users to do?
Signup and view all the answers
Which of the following is NOT a function of a user profile in Salesforce?
Which of the following is NOT a function of a user profile in Salesforce?
Signup and view all the answers
When cloning a profile to create a custom profile, which aspect remains unchanged?
When cloning a profile to create a custom profile, which aspect remains unchanged?
Signup and view all the answers
What type of licenses allows a user to perform operations their user license does not permit?
What type of licenses allows a user to perform operations their user license does not permit?
Signup and view all the answers
Which is a characteristic of feature licenses?
Which is a characteristic of feature licenses?
Signup and view all the answers
Which standard profile provides the maximum access allowed by the Salesforce user license?
Which standard profile provides the maximum access allowed by the Salesforce user license?
Signup and view all the answers
Which of the following is an example of a feature license in Salesforce?
Which of the following is an example of a feature license in Salesforce?
Signup and view all the answers
Which profile allows for the creation and running of reports but does not grant access to all records?
Which profile allows for the creation and running of reports but does not grant access to all records?
Signup and view all the answers
Which of the following statements is true about managing licenses in Salesforce?
Which of the following statements is true about managing licenses in Salesforce?
Signup and view all the answers
What is the purpose of the 'Manage Users' permission?
What is the purpose of the 'Manage Users' permission?
Signup and view all the answers
Why might companies prefer basic user licenses?
Why might companies prefer basic user licenses?
Signup and view all the answers
Which setting allows a tab to display in an app but not in the App Launcher?
Which setting allows a tab to display in an app but not in the App Launcher?
Signup and view all the answers
What is the recommended approach when creating a custom profile?
What is the recommended approach when creating a custom profile?
Signup and view all the answers
What can be viewed under Setup
> Company Settings
> Company Information
?
What can be viewed under Setup
> Company Settings
> Company Information
?
Signup and view all the answers
Which of the following correctly describes profiles in Salesforce?
Which of the following correctly describes profiles in Salesforce?
Signup and view all the answers
Which of the following profiles provides no access to any objects?
Which of the following profiles provides no access to any objects?
Signup and view all the answers
Which profile grants read-only access to User Setup options?
Which profile grants read-only access to User Setup options?
Signup and view all the answers
Feature licenses typically relate to which of the following?
Feature licenses typically relate to which of the following?
Signup and view all the answers
What distinguishes administrative profile settings from general permissions?
What distinguishes administrative profile settings from general permissions?
Signup and view all the answers
Which of the following statements is correct regarding permission set licenses?
Which of the following statements is correct regarding permission set licenses?
Signup and view all the answers
In which scenario might the standard interface be preferred over the enhanced one?
In which scenario might the standard interface be preferred over the enhanced one?
Signup and view all the answers
Which type of security setting should we explore after reviewing user interface settings?
Which type of security setting should we explore after reviewing user interface settings?
Signup and view all the answers
What is a primary characteristic of a user's profile in Salesforce?
What is a primary characteristic of a user's profile in Salesforce?
Signup and view all the answers
Which of the following statements about permission sets is accurate?
Which of the following statements about permission sets is accurate?
Signup and view all the answers
What happens if you try to assign a permission set that exceeds a user's license?
What happens if you try to assign a permission set that exceeds a user's license?
Signup and view all the answers
What is the maximum number of muting permission sets that a permission set group can have?
What is the maximum number of muting permission sets that a permission set group can have?
Signup and view all the answers
What action must a user perform to change the ownership of a record?
What action must a user perform to change the ownership of a record?
Signup and view all the answers
How do permission sets primarily enhance user management?
How do permission sets primarily enhance user management?
Signup and view all the answers
What is true about the relationship between permission sets and profiles?
What is true about the relationship between permission sets and profiles?
Signup and view all the answers
What occurs if a user with MFA enabled attempts to log in from a Trusted IP Range?
What occurs if a user with MFA enabled attempts to log in from a Trusted IP Range?
Signup and view all the answers
Which statement about queues is true?
Which statement about queues is true?
Signup and view all the answers
What is the primary function of object level security in Salesforce?
What is the primary function of object level security in Salesforce?
Signup and view all the answers
What is the most restrictive setting in the sharing model?
What is the most restrictive setting in the sharing model?
Signup and view all the answers
What is the purpose of creating a permission set group?
What is the purpose of creating a permission set group?
Signup and view all the answers
Why is record level security significant?
Why is record level security significant?
Signup and view all the answers
Which permissions can a permission set not control?
Which permissions can a permission set not control?
Signup and view all the answers
Which permission allows a user to edit, delete, and view all records of an object?
Which permission allows a user to edit, delete, and view all records of an object?
Signup and view all the answers
Which of the following permissions automatically grants the least access to a user?
Which of the following permissions automatically grants the least access to a user?
Signup and view all the answers
Which best describes how muting permission sets function?
Which best describes how muting permission sets function?
Signup and view all the answers
What are Organization Wide Defaults (OWDs)?
What are Organization Wide Defaults (OWDs)?
Signup and view all the answers
Why might the 'View All Data' permission be considered especially powerful?
Why might the 'View All Data' permission be considered especially powerful?
Signup and view all the answers
What is one benefit of using permission sets over profiles?
What is one benefit of using permission sets over profiles?
Signup and view all the answers
Which of the following is NOT an access level for Organization Wide Defaults?
Which of the following is NOT an access level for Organization Wide Defaults?
Signup and view all the answers
What must a user have in order to own a record?
What must a user have in order to own a record?
Signup and view all the answers
How are object level security permissions usually governed in Salesforce?
How are object level security permissions usually governed in Salesforce?
Signup and view all the answers
Custom permission sets that are not associated with a license can be assigned to which users?
Custom permission sets that are not associated with a license can be assigned to which users?
Signup and view all the answers
Which standard profile has the highest level of access across both standard and custom objects in Salesforce?
Which standard profile has the highest level of access across both standard and custom objects in Salesforce?
Signup and view all the answers
How can a user return ownership of a record to a queue?
How can a user return ownership of a record to a queue?
Signup and view all the answers
When can a permission set not provide additional access?
When can a permission set not provide additional access?
Signup and view all the answers
How are permissions organized within a permission set interface?
How are permissions organized within a permission set interface?
Signup and view all the answers
Which of the following permissions does NOT respect record level security?
Which of the following permissions does NOT respect record level security?
Signup and view all the answers
What is the significance of the 'Controlled By Parent' setting?
What is the significance of the 'Controlled By Parent' setting?
Signup and view all the answers
Which option describes permission sets correctly?
Which option describes permission sets correctly?
Signup and view all the answers
What will happen if a user lacks 'Read' access on an object?
What will happen if a user lacks 'Read' access on an object?
Signup and view all the answers
Which of the following is true regarding the 'Public Read/Write/Transfer' option?
Which of the following is true regarding the 'Public Read/Write/Transfer' option?
Signup and view all the answers
What is the primary function of a queue in a sharing model?
What is the primary function of a queue in a sharing model?
Signup and view all the answers
What does the 'Modify All Data' permission allow a user to do?
What does the 'Modify All Data' permission allow a user to do?
Signup and view all the answers
How does strong org level security benefit a Salesforce environment?
How does strong org level security benefit a Salesforce environment?
Signup and view all the answers
What happens when a user claims ownership of a record from a queue?
What happens when a user claims ownership of a record from a queue?
Signup and view all the answers
How are Organization Wide Defaults (OWD) set up in a Salesforce org?
How are Organization Wide Defaults (OWD) set up in a Salesforce org?
Signup and view all the answers
When editing user permissions for object access, which method is restricted in standard profiles?
When editing user permissions for object access, which method is restricted in standard profiles?
Signup and view all the answers
What does the setting 'Have a user 'Modify All' permission enable them to do?
What does the setting 'Have a user 'Modify All' permission enable them to do?
Signup and view all the answers
Under what circumstances should the Organization Wide Default (OWD) be set to 'Public Read Only'?
Under what circumstances should the Organization Wide Default (OWD) be set to 'Public Read Only'?
Signup and view all the answers
What is the main purpose of Organization Wide Defaults (OWDs)?
What is the main purpose of Organization Wide Defaults (OWDs)?
Signup and view all the answers
What is indicated by the 'View All' permission on an object?
What is indicated by the 'View All' permission on an object?
Signup and view all the answers
How can an organization enforce usage of MFA?
How can an organization enforce usage of MFA?
Signup and view all the answers
How does the role hierarchy affect record access in Salesforce?
How does the role hierarchy affect record access in Salesforce?
Signup and view all the answers
Which option describes the relationship between role hierarchy and sharing in Salesforce?
Which option describes the relationship between role hierarchy and sharing in Salesforce?
Signup and view all the answers
What is a public group in Salesforce?
What is a public group in Salesforce?
Signup and view all the answers
What is NOT a function of the role hierarchy?
What is NOT a function of the role hierarchy?
Signup and view all the answers
When is the 'Grant Access Using Hierarchies' checkbox important?
When is the 'Grant Access Using Hierarchies' checkbox important?
Signup and view all the answers
Why might default OWD settings be problematic?
Why might default OWD settings be problematic?
Signup and view all the answers
Which of the following statements is true about 'View All', 'Modify All', 'View All Data', and 'Modify All Data' permissions?
Which of the following statements is true about 'View All', 'Modify All', 'View All Data', and 'Modify All Data' permissions?
Signup and view all the answers
What should you do if all users in the organization need access to an object?
What should you do if all users in the organization need access to an object?
Signup and view all the answers
What is the main purpose of restriction rules in Salesforce?
What is the main purpose of restriction rules in Salesforce?
Signup and view all the answers
When creating a public group, which option can be utilized to streamline management?
When creating a public group, which option can be utilized to streamline management?
Signup and view all the answers
How can custom objects differ from standard objects in terms of sharing settings?
How can custom objects differ from standard objects in terms of sharing settings?
Signup and view all the answers
How does a user's access to tasks and events typically get determined in Salesforce?
How does a user's access to tasks and events typically get determined in Salesforce?
Signup and view all the answers
What does a custom permission allow a user to do?
What does a custom permission allow a user to do?
Signup and view all the answers
Which setting allows the sharing of records among different levels in a hierarchy?
Which setting allows the sharing of records among different levels in a hierarchy?
Signup and view all the answers
What must be done after creating and granting a custom permission in Salesforce?
What must be done after creating and granting a custom permission in Salesforce?
Signup and view all the answers
Which of the following is NOT a benefit of custom permissions?
Which of the following is NOT a benefit of custom permissions?
Signup and view all the answers
What is a potential strategy for establishing interdependencies between custom permissions?
What is a potential strategy for establishing interdependencies between custom permissions?
Signup and view all the answers
Which method can developers use to check custom permissions in Apex?
Which method can developers use to check custom permissions in Apex?
Signup and view all the answers
What happens if a user lacks a custom permission required for an action in Salesforce?
What happens if a user lacks a custom permission required for an action in Salesforce?
Signup and view all the answers
In what scenario would restriction rules be beneficial in Salesforce?
In what scenario would restriction rules be beneficial in Salesforce?
Signup and view all the answers
How can custom permissions integrate with Lightning App Builder?
How can custom permissions integrate with Lightning App Builder?
Signup and view all the answers
Which objects can support manual sharing?
Which objects can support manual sharing?
Signup and view all the answers
What criterion must be met for a user to manually share a record?
What criterion must be met for a user to manually share a record?
Signup and view all the answers
What happens when the owner of a record changes after it has been manually shared?
What happens when the owner of a record changes after it has been manually shared?
Signup and view all the answers
Under which condition can you not manually share a record?
Under which condition can you not manually share a record?
Signup and view all the answers
Who can create and implement restriction rules?
Who can create and implement restriction rules?
Signup and view all the answers
How do restriction rules affect user access to records?
How do restriction rules affect user access to records?
Signup and view all the answers
What is the maximum number of restriction rules that can be created per object in Trailhead Playground and Developer Edition?
What is the maximum number of restriction rules that can be created per object in Trailhead Playground and Developer Edition?
Signup and view all the answers
What determines which records a restriction rule applies to?
What determines which records a restriction rule applies to?
Signup and view all the answers
Why can't restriction rules grant users access to records?
Why can't restriction rules grant users access to records?
Signup and view all the answers
Which permission allows users to bypass restriction rules?
Which permission allows users to bypass restriction rules?
Signup and view all the answers
What action should a user take to access manual sharing on a record?
What action should a user take to access manual sharing on a record?
Signup and view all the answers
What is the function of the 'Grant Access Using Hierarchies' checkbox in public groups?
What is the function of the 'Grant Access Using Hierarchies' checkbox in public groups?
Signup and view all the answers
What can trigger an error when accessing a record with restriction rules?
What can trigger an error when accessing a record with restriction rules?
Signup and view all the answers
What access options exist when manually sharing a record?
What access options exist when manually sharing a record?
Signup and view all the answers
What are the two types of sharing rules in Salesforce?
What are the two types of sharing rules in Salesforce?
Signup and view all the answers
Why can public groups not own records?
Why can public groups not own records?
Signup and view all the answers
What is a consequence of having multiple restriction rules on a single object?
What is a consequence of having multiple restriction rules on a single object?
Signup and view all the answers
How are sharing rules created in Salesforce?
How are sharing rules created in Salesforce?
Signup and view all the answers
What happens if the criteria for a sharing rule are no longer met?
What happens if the criteria for a sharing rule are no longer met?
Signup and view all the answers
Which statement about criteria-based sharing rules is true?
Which statement about criteria-based sharing rules is true?
Signup and view all the answers
What level of access can sharing rules provide for records, aside from Campaign objects?
What level of access can sharing rules provide for records, aside from Campaign objects?
Signup and view all the answers
Which Salesforce object types support sharing rules?
Which Salesforce object types support sharing rules?
Signup and view all the answers
If 'Controlled By Parent' is set for an object, what impact does it have on sharing rules?
If 'Controlled By Parent' is set for an object, what impact does it have on sharing rules?
Signup and view all the answers
What is the capacity of manual sharing in Salesforce?
What is the capacity of manual sharing in Salesforce?
Signup and view all the answers
In what way do public groups assist in managing record access?
In what way do public groups assist in managing record access?
Signup and view all the answers
What is one limitation of sharing rules mentioned in the content?
What is one limitation of sharing rules mentioned in the content?
Signup and view all the answers
How does manual sharing differ from other sharing methods?
How does manual sharing differ from other sharing methods?
Signup and view all the answers
Study Notes
User Licenses
- User licenses determine the maximum features a user can access in Salesforce.
- Each org has a set number of licenses, purchased individually or in groups.
- Free orgs (e.g., Trailhead Playgrounds, Developer Edition) have limited licenses.
-
Salesforce
licenses provide full access to all org features. -
Salesforce Platform
licenses are limited to specific features (e.g., Accounts, Contacts, reports). - Licenses are assigned to users via the
User License
picklist. - Permissions in profiles and permission sets determine user capabilities, not licenses.
- Companies use the least expensive license that meets requirements.
Extending User Licenses
- Permission Set License: Expands user permissions beyond their base license.
- Feature License: Grants extra permissions for specific Salesforce features.
- Permission set licenses often relate to add-on products (e.g., Field Service, Commerce Cloud) and products' specific functionalities.
- Feature licenses target specific aspects like Flows, Knowledge, or Marketing.
- Feature licenses are assigned to users via checkboxes.
- Permission Set Licenses require a linked permission set.
Profiles
- Profiles define a user's basic permissions.
- Orgs come with standard profiles and allow custom profiles.
- Profiles control user interface access (apps, tabs, record views).
- Profiles categorize permissions for the org (org, objects, fields), user interface (apps, tabs), and general administration.
- Profiles control actions like import/export, reporting and dashboards, standard object operations.
- Use existing profiles as a starting point when creating custom ones.
- Standard profiles include
Minimum Access - Salesforce
,Standard User
,System Administrator
.
Permission Sets
- Permission sets grant additional permissions beyond profiles.
- Standard permission sets are tied to licenses.
- Custom permission sets can be tied to licenses or not.
- Permission sets add permissions; they do not remove them, even when multiple sets exist.
- Permission set groups can assign multiple permission sets efficiently.
- Muting permission sets within groups allows disabling specific permissions without removing from the set.
Org Level Security
- Org level security controls access and authentication to the Salesforce org.
- Password settings enforce password requirements (length, complexity, reset frequency).
-
Login Hours
andLogin IP Ranges
restrict login times and locations. - Multi-Factor Authentication (MFA) adds security beyond username/password.
-
Trusted IP Ranges
allow login from unrecognized devices without additional verification. -
Device Activation
requires verification for unrecognized login attempts.
Object Level Security
- Object level security controls user actions on specific Salesforce objects.
- Permissions include
Read
,Create
,Edit
,Delete
,View All
,Modify All
. -
View All Data
grantsView All
on all objects. -
Modify All Data
grants full access across all objects. - Security is managed through profiles and permission sets.
- Access to custom objects is only possible with custom profiles or permission sets.
Field Level Security
- Field level security controls user access to specific fields on objects.
- Access levels include: no access, read, read/edit.
- Security is configured per field and per profile.
- Settings for required, auto-number, and formula fields are predetermined.
Record Level Security
- Record-level security determines which records a user can access.
- Users can have full access to records they own or access based on other security configurations.
- Access is determined by record ownership and through various sharing model tools.
Queues
- Queues are groups of users to share record ownership and tasks.
- Queues are effective for distributing workloads among users.
- Members can claim and release records' ownership as needed.
Organization Wide Defaults (OWD)
- OWDs are default record sharing permissions for all users on each object.
- Common levels are
Private
,Public Read Only
, andPublic Read/Write
. - OWD settings are assigned on an object-by-object basis affecting all users.
Role Hierarchy
- The role hierarchy represents company structure in Salesforce.
- Users inherit access from those below them in the hierarchy.
- Role-based sharing propagates record access vertically.
- Access granted through hierarchies doesn't affect users in other roles or branches.
Public Groups
- Public groups organize users for record sharing or other actions.
- Members can be individuals, role holders, or members of other public groups.
- Public groups often contain all logged-in users (e.g.,
All Internal Users
). - Record access granted to a group typically propagates through the role hierarchy.
Sharing Rules
- Sharing rules are defined conditions that allow granting access to records based on specific criteria.
- They can be owner-based (access based on owner) or criteria-based (access based on criteria).
- They are used to extend access beyond OWDs and role-based sharing.
- Sharing rules can't be used on objects controlled by parent.
Manual Sharing
- Allows users with full access to (manually) share records with others.
- Access levels include read or read/edit access.
- Ideal for one-time record access requirements.
- Access is often tied to roles and objects.
Restriction Rules
- Restriction rules remove record access based on criteria.
- Applicable to custom objects or specific standard objects.
- Criteria include field values and custom permissions.
- Useful for restricting access to specific objects under particular conditions.
Custom Permissions
- Custom permissions allow controlling user access to specific features or actions in Salesforce.
- Create custom control user access to features in Salesforce.
- Enforce specific conditions depending on user access and criteria.
- Useful in adding granular control to custom implementations and operations.
Studying That Suits You
Use AI to generate personalized quizzes and flashcards to suit your learning preferences.
Description
Test your knowledge about user licenses in Salesforce. This quiz covers various aspects, including the roles, types, and limitations of user licenses within the Salesforce ecosystem. Challenge yourself to see how much you know about managing user access and licensing requirements.