An administrator at Universal Containers is setting up a new Sales Development Representative (SDR) Agent. The agent's purpose is to nurture cold leads before connecting them to the assigned sales…

Question

Options

• AAssign the user in the highest-level role within the North America role hierarchy as the SDR Agent
• BGrant View All record permission of the Lead object to the `Einstein Agent User' profile,
• CCreate a criteria-based sharing rule to grant access to targeted lead records to SDR Agent User.

• A
  13% (5)
• B
  5% (2)
• C
  82% (32)

Explanation

The SDR Agent needs access specifically to leads in the North America sales region - not all leads. Salesforce's sharing model principle of least privilege means the agent should get only the access it needs. A criteria-based sharing rule lets an administrator define a filter condition (e.g., Region = 'North America') and grant the matching lead records to a specific user or group - in this case, the SDR Agent User. This is targeted, auditable, and follows security best practices. Option A (assigning the highest-level role in the North America hierarchy) would grant access based on the role hierarchy, which may be broader than needed and is not the right mechanism for an agent user. Option B (granting View All on the Lead object to the Einstein Agent User profile) grants access to every lead record in the entire org - this is far too permissive and violates the principle of least privilege, creating unnecessary data exposure risk.

No community discussion yet for this question.