# Permission sets, sharing defaults and Admin Console security

*Agentforce Life Sciences Consultant Study Guide · Foundations and Administration · Last updated November 13, 2026 · https://www.certifyforce.com/study-guide/agentforce-life-sciences-consultant/foundations-and-administration/permission-sets-sharing-defaults-and-admin-console-security*

Which Customer Engagement permission sets and profiles each persona needs, the organization-wide defaults and automatic sharing features the managed package expects, profile and Security Exclusion best practices, Admin Console tile filtering and hierarchical settings, trigger handler administration, and the configuration objects behind profile-specific settings.

- Certification: Salesforce Agentforce Life Sciences Consultant
- Exam section: Foundations and Administration
- Study guide: https://www.certifyforce.com/study-guide/agentforce-life-sciences-consultant

**Official exam objective:**

> Apply security and system configuration fundamentals for Agentforce Life Sciences.

## What the exam expects

- Pick the permission sets for an admin, an installer and each field persona.
- Choose custom profiles for admins and field users, and apply the profile best practices.
- Specify the organization-wide defaults and the automatic sharing features the managed package expects, and the setting that must never be turned off through metadata.
- Restrict Admin Console tiles by permission and reason about org default versus profile settings.
- Share the Life Science metadata objects and explain trigger handler administration and Security Exclusion.
- Assign a configuration record to a profile through the Tooling API.

Key terms: **persona permission set**, a set such as Life Sciences Field Medical that grants one role's features; **Life Sciences Core**, the set granting the package's Apex classes; **Admin Console**, the Life Sciences Commercial app's configuration tab; **tile filtering**, the setting that limits tiles by user permission; **hierarchical setting**, a configuration set at org default or profile level; **LifeSciConfigAssignment**, the record linking a configuration record to a profile or user.

## Key facts

| Fact | Detail | Source |
|---|---|---|
| Life Sciences Core | Assign to all Customer Engagement users, including admins | [Assign Permission Sets](https://help.salesforce.com/s/articleView?id=ind.lsc_customer_engagement_assign_permission_sets.htm&type=5&language=en_US) |
| Pre-installation admin | Life Sciences Commercial Admin and Health Cloud Starter | [Get Your Org Ready](https://help.salesforce.com/s/articleView?id=ind.lsc_customer_engagement_get_org_ready.htm&type=5&language=en_US) |
| Field persona profile | Clone Standard User; turn off View Setup and Configuration | [Custom Profiles](https://help.salesforce.com/s/articleView?id=ind.lsc_customer_engagement_create_custom_profiles.htm&type=5&language=en_US) |
| Unused profiles | Rename with `dep_` | [Profile Best Practices](https://help.salesforce.com/s/articleView?id=ind.lsc_security_best_practices_profiles_page_layouts.htm&type=5&language=en_US) |
| Verify and Enable Settings | Turning them off through metadata APIs breaks future upgrades | [Get Your Org Ready](https://help.salesforce.com/s/articleView?id=ind.lsc_customer_engagement_get_org_ready.htm&type=5&language=en_US) |
| Provider Affiliation default | Public Read/Write internally | [Get Your Org Ready](https://help.salesforce.com/s/articleView?id=ind.lsc_customer_engagement_get_org_ready.htm&type=5&language=en_US) |
| Metadata object sharing rules | Owner-based, All Internal Users to All Internal Users, Read Only | [Metadata Object Sharing Rules](https://help.salesforce.com/s/articleView?id=ind.lsc_create_life_science_metadata_object_sharing_rules.htm&type=5&language=en_US) |
| Tile filtering off | All Admin Console users see all tiles | [Filter Admin Console Tiles](https://help.salesforce.com/s/articleView?id=ind.lsc_admin_console_filter_tiles.htm&type=5&language=en_US) |
| Trigger handler toggling | Commercial Admin permission set and Customize Application | [Manage Trigger Handlers](https://help.salesforce.com/s/articleView?id=ind.lsc_trigger_handler_manage.htm&type=5&language=en_US) |
| AssignmentLevel values | Profile or User | [LifeSciConfigAssignment](https://developer.salesforce.com/docs/get_document_content/life_sciences_dev_guide/tooling_api_objects_lifesciconfigassignment.htm/en-us/260.0) |

## Check yourself

- When tile filtering is on, which permission opens the Error Log Management tile?
- Why must every Customer Engagement user also be assigned to a territory?
- Which LifeSciConfigFieldValue field stores a true or false value, and what is its default?
- At which two levels can a hierarchical Admin Console configuration be set?

## Sources

- [Assign Permission Sets to Life Sciences Customer Engagement Users](https://help.salesforce.com/s/articleView?id=ind.lsc_customer_engagement_assign_permission_sets.htm&type=5&language=en_US)
- [Get Your Org Ready for the Customer Engagement Managed Package](https://help.salesforce.com/s/articleView?id=ind.lsc_customer_engagement_get_org_ready.htm&type=5&language=en_US)
- [Get Your Org Ready for Your Users](https://help.salesforce.com/s/articleView?id=ind.lsc_customer_engagement_get_org_ready_users.htm&type=5&language=en_US)
- [Create Custom Profiles for Customer Engagement Users](https://help.salesforce.com/s/articleView?id=ind.lsc_customer_engagement_create_custom_profiles.htm&type=5&language=en_US)
- [Profile and Page Layout Best Practices for Life Sciences](https://help.salesforce.com/s/articleView?id=ind.lsc_security_best_practices_profiles_page_layouts.htm&type=5&language=en_US)
- [Filter Admin Console Tiles by User Permissions](https://help.salesforce.com/s/articleView?id=ind.lsc_admin_console_filter_tiles.htm&type=5&language=en_US)
- [Hierarchical Settings in the Admin Console](https://help.salesforce.com/s/articleView?id=ind.lsc_admin_console_hierarchical_settings.htm&type=5&language=en_US)
- [Create Life Science Metadata Object Sharing Rules](https://help.salesforce.com/s/articleView?id=ind.lsc_create_life_science_metadata_object_sharing_rules.htm&type=5&language=en_US)
- [Manage Trigger Handlers](https://help.salesforce.com/s/articleView?id=ind.lsc_trigger_handler_manage.htm&type=5&language=en_US)
- [Trigger Handler Administration](https://help.salesforce.com/s/articleView?id=ind.lsc_trigger_handler_administration.htm&type=5&language=en_US)
- [LifeSciConfigAssignment](https://developer.salesforce.com/docs/get_document_content/life_sciences_dev_guide/tooling_api_objects_lifesciconfigassignment.htm/en-us/260.0)
- [LifeSciConfigFieldValue](https://developer.salesforce.com/docs/get_document_content/life_sciences_dev_guide/tooling_api_objects_lifesciconfigfieldvalue.htm/en-us/260.0)

## About the full unit

The "Core concepts", "Exam traps" and "Worked scenario" sections of this unit, its 14 linked practice questions, and unlimited timed mock exams are included with the Agentforce Life Sciences Consultant pack (USD $19): https://www.certifyforce.com/practice-exams