Where are the primary object permissions defined?

How should permissions be set in the profile, permissive or restrictive?

What permissions can be set in the User Profile?

How many Profiles can a unique user have?

What is a Permission Set?

What is the limit on permission sets that a user can have?

If you were hiring temporary help and wanted them to have read access to all records, but have the ability to also Edit and Create Lead records, what Profile would you assign?

What do the settings in a user's profile determine?

What do the permissions in a user's profile determine?

What do the permissions View All Data and Modify All Data do?

How do you edit the object permissions on a standard profile?

How do you deny a user an object permission that is granted in a standard profile?

How would you grant a user temporary access to edit an object or field?

What is Field Level Security (or field permissions) used for?

What control do page layouts provide in allowing or denying a user to see information?

How does Field Level Security (FLS) improve upon page layouts in terms of restricting access to field data?

How do you apply field level security?

Can you modify field permissions on Standard Profiles?

True or False:

A permission set can be used to restrict a user's permissions.

After setting Object and Field Level Security permissions, what is the 3rd level of data access control?

What is Record Access?

How are permissions on a record evaluated?

How do you control Record Access?

What are the 4 record level security tools?

What are the key principles to record access?

Can Org-wide sharing be set differently for different objects?

How are permissions set for a Detail record in a Master-Detail relationship.

How do you disable automatic access using hierarchies?

Who has access to a record when the Grant Access Using Hierarchies checkbox is de-selected?

Who do you assign Permission Sets to, Users, Public Groups, or Roles?

What is assigned to Public Groups and Roles?

What access is assigned in Sharing Rules?

When is it not a good idea to use sharing rules?

When is it a good idea to use sharing rules?

What is a Public Group?

What is a good rule of thumb for when to create a public group?

Who are Permission Sets assigned to, Users, Public Groups, or Roles?

How many User Accounts can you add at one time?

What is the effect if you set a trusted IP Range for:

A) Whole Org

B) A given User Profile

What happens when users are logged in past their assigned login hours?

How do Permission Sets work with Profiles?

What does the Profile control vs the Permission Set?

How do you restrict field visibility in related lists, list views, reports, and search results?

How are Object, Field, & Record level permissions evaluated and applied?

If you disable the Grant Access Using Hierarchies option on a customer object, how are users impacted?

When using Roles, what does a higher level role see when observing subordinates data?

Can you change the Grant Access Using Hierarchies setting on Standard Objects?

What are the 3 components of sharing rules?

Who can be members of a Public Group?