PLAT-ADMN-201 Question #101: Real Exam Question with Answer & Explanation

Question

A Platform Administrator at Cloud Kicks has set up a junior administrator as a delegated administrator in Salesforce. What should the Platform Administrator consider regarding delegated administrators?

Options

• ADelegated administrators can unlock users but cannot reset passwords.
• BDelegated administrators can update field-level security on standard objects.
• CDelegated administrators cannot modify permission sets.
• DDelegated administrators cannot assign users to profiles.

Explanation

Delegated administrators in Salesforce have a defined, limited scope of administrative authority - and modifying permission sets falls outside that scope, making C correct. Permission sets are a higher-level security configuration reserved for full administrators.

Why the distractors are wrong:

• A is incorrect - delegated admins can both unlock users and reset passwords; these are core tasks they're explicitly granted.
• B is incorrect - delegated admins cannot update field-level security on standard objects; that privilege belongs to full admins.
• D is incorrect - delegated admins can assign users to profiles, but only profiles included in their delegated group configuration.

Memory tip: Think of delegated admins as "user managers, not security architects." They handle day-to-day user tasks (unlock, reset passwords, assign profiles within their scope), but anything touching the security model - like permission sets or field-level security - stays with full admins.

No community discussion yet for this question.