nerdexam
Microsoft

MB-280 · Question #110

You need to ensure that a user named User1 can assign salespeople to sales territories. The solution must use the principle of least privilege. To which security role should you assign User1?

The correct answer is C. Vice president of sales. Salesperson [Preferred] Vice president of sales [Too much privilege compared to Salesperson. It is the second best option to be used if Salesperson is not an option] Incorrect: Forecast manager [Too limited] System customizer [Too limited]] Users who have full permission to…

Configure the security model

Question

You need to ensure that a user named User1 can assign salespeople to sales territories. The solution must use the principle of least privilege. To which security role should you assign User1?

Options

  • ASequence manager
  • BSales team member
  • CVice president of sales
  • DForecast manager

How the community answered

(68 responses)
  • A
    3% (2)
  • B
    9% (6)
  • C
    84% (57)
  • D
    4% (3)

Explanation

  • Salesperson [Preferred] * Vice president of sales [Too much privilege compared to Salesperson. It is the second best option to be used if Salesperson is not an option] Incorrect: * Forecast manager [Too limited] * System customizer [Too limited]] Users who have full permission to customize the environment. Users with this role have organization-level access to custom entities and user-level access to system entities. Access includes but not limited to reate, read, write, delete, and customizations across all features in the application. * Sales team member [Too limited] * Sequence manager [Too limited] * Vice president of sales [Too much privilege compared to Salesperson] Users who typically manage the sales organization for several business units or the entire organization Access includes but not limited to Same permissions as the Sales Manager, except that their scope of access is broader. Users who manage a team of sellers and are responsible for the team's performance. They're also responsible for creating and managing products, setting sales targets, and projecting sales Access includes but not limited to Access to product management, sales management, sales forecasting, and goal management, along with the privileges of the Salesperson role. The principle of least privilege means granting the user only the minimum permissions necessary to perform their tasks. In this case, to allow User1 to assign salespeople to sales territories, the Salesperson role typically includes privileges related to managing sales processes, such as territories, while limiting access to broader system functions like those available to a Vice President of Sales or System Customizer. The System Customizer and Vice President of Sales roles would grant more permissions than necessary, which would violate the principle of least privilege. The Sales Team Member role is typically too limited for assigning salespeople to sales territories, which requires more specific

Topics

#security role#least privilege#sales territory#territory assignment

Community Discussion

No community discussion yet for this question.

Full MB-280 Practice