Organization Setup & User Management Flashcards

A Salesforce admin needs to prevent users from logging in outside of business hours. Which feature should they configure?

Answer: Login Hours

Login Hours, set on profiles, restrict when users can log into Salesforce.

Which statement is TRUE about Salesforce usernames?

Answer: Usernames must be unique across all Salesforce orgs globally

Salesforce usernames must be globally unique across every Salesforce org, not just within one org.

What happens to records owned by a user when their account is deactivated?

Answer: Records remain owned by the deactivated user

Deactivating a user does not change record ownership; the records remain assigned to the deactivated user.

An org has users who should see all records but never modify them. Which profile permission best meets this need?

Answer: View All Data

'View All Data' is a profile-level permission that grants read access to all records regardless of sharing rules.

A user receives the error 'You do not have permission to log in' despite having the correct credentials. What should the admin check first?

Answer: Login Hours and Login IP Ranges on the profile

Login Hour and IP Range restrictions on a profile are the most common cause of this login error.

Which User Management setting allows an admin to grant one user the ability to log in as another user for troubleshooting?

Answer: Grant Login Access

'Grant Login Access' allows a user to authorize Salesforce support or their admin to log in as them.

A company wants to enforce that all users in a specific profile must use two-factor authentication. Where is this configured?

Answer: Session Security Level in the profile

The 'Session Security Level Required at Login' setting on a profile enforces MFA (high-assurance) for that profile.