Security & Access Management Flashcards

Which report type in Salesforce allows an admin to audit which users have which profiles and permission sets assigned?

Answer: User and Permission Set Assignment report

The User and Permission Set Assignment report (from User reports) shows which profiles and permission sets are linked to each user.

What is the maximum number of IP addresses that can be added to a profile's Login IP Ranges list?

Answer: 20

Each profile allows up to 10 IP range entries (each range can span many IPs), but Salesforce limits you to 10 ranges per profile.

When should an admin use Manual Sharing instead of a Sharing Rule?

Answer: When the sharing requirement is for a specific record and doesn't follow a predictable pattern

Manual Sharing is used for one-off, record-specific sharing that can't be automated through ownership or criteria-based rules.

Which Salesforce security layer controls whether a user can see a tab for a given object in the app navigation?

Answer: Tab Settings on Profile

Tab Settings on a profile (Default On, Default Off, Tab Hidden) control whether the object's tab is visible to users with that profile.

An organization wants all leads created by marketing to be shared automatically with the entire Sales team. The OWD for Leads is Private. What is the best approach?

Answer: Create an owner-based sharing rule sharing Leads owned by Marketing role with Sales role

An owner-based sharing rule can automatically share records owned by the Marketing role with the Sales role, keeping OWD Private elsewhere.

Which user license type in Salesforce is best suited for external partners who only need access to a limited set of objects via a portal?

Answer: Partner Community License

Partner Community Licenses are designed for external partners and provide access to a limited set of standard and custom objects through Experience Cloud.

What does the 'View Setup and Configuration' permission allow a Salesforce user to do?

Answer: View setup pages, audit trails, and metadata without making changes

'View Setup and Configuration' grants read-only access to the Setup menu and Setup Audit Trail without allowing changes.