1 · Salesforce Administrator

2. Security: profiles, permission sets and sharing

Who can see which objects, fields and records.

12 min read · 3 MCQs

Three layers

Object and field access come from profiles and permission sets. Record access comes from sharing: org-wide defaults, role hierarchy, sharing rules and manual sharing.

Start with the most restrictive org-wide default, then open up.
Prefer permission sets over many custom profiles.
Field-level security hides a field everywhere, including reports and the API.

Chapter quiz

3 questions · pass mark 75%

1. What is the recommended way to grant extra access to a few users?
2. Org-wide defaults control access to…
3. The role hierarchy typically lets…