ADM-201 Question #225: Real Exam Question with Answer & Explanation

Question

An administrator Installed a managed package that contains a permission set group. The permission set group that was installed Includes Delete access on several objects, and the administrator needs to prevent users in the permission set group from being able to delete records. What should the administrator do to control Delete access?

Options

• AUse a muting permission set with a permission set group to mute selected permissions.
• BEdit the profile for the users to remove Delete access from the objects.
• CCreate a new permission set that has Delete access deselected for the objects.
• DCreate a new role that prevents Delete permissions from rolling up to the users.

Explanation

To prevent users from deleting records when Delete access is granted by a managed package's permission set group, an administrator should use a muting permission set.

Common mistakes.

• B. Editing a user's profile to remove Delete access is less flexible and may not override permissions granted by a managed package's permission set group, as permission sets are typically additive.
• C. Creating a new permission set with Delete access deselected will not override or remove Delete access already granted by an existing permission set group, as permissions are additive.
• D. Roles control record-level access through the role hierarchy and sharing rules, but they do not control object-level permissions like Delete access.

Concept tested. Muting permission sets

Reference. https://help.salesforce.com/s/articleView?id=sf.perm_sets_muting.htm&type=5

No community discussion yet for this question.