Salesforce Sharing and Visibility Certification Practice Exam

How can an Architect provide read-only access to the Category field for specific users of a Sales Operations profile?

1. Create a permission set in the Category field to read-only and assign it to the users

2. Create a new profile without edit access to Category and assign it to the users

3. Create a new page layout with the Category Field set to read-only for these users

4. Create a custom permission to grant read-only access to Category and assign it to the users

The correct answer is: Create a new profile without edit access to Category and assign it to the users

To provide read-only access to the Category field for specific users of a Sales Operations profile, creating a new profile without edit access to the Category field is an effective approach. By setting up a unique profile, you can customize the permissions specifically for those users, ensuring they only have read access. Profiles in Salesforce determine the baseline permissions for users, including field-level security options, so creating a dedicated profile allows for greater control over what users can and cannot do with particular fields. When you omit edit access for the Category field in this new profile, users assigned to it will be limited to viewing the field without the ability to make any changes. This ensures that they see the data they need without inadvertently altering it. Other options may not provide the same level of specificity or control. For example, using a permission set can grant additional access to multiple users but may not effectively restrict editing rights if desired. Meanwhile, adjusting page layouts could result in a scenario where users have access to multiple fields or display behaviors that may not align with the goal of precise control over the Category field. Lastly, custom permissions are generally used for broader access control scenarios rather than specific field-level security adjustments, making them less applicable in face of the specific need for read-only access to a single