Permission sets, sharing defaults and Admin Console security
Which Customer Engagement permission sets and profiles each persona needs, the organization-wide defaults and automatic sharing features the managed package expects, profile and Security Exclusion best practices, Admin Console tile filtering and hierarchical settings, trigger handler administration, and the configuration objects behind profile-specific settings.
Apply security and system configuration fundamentals for Agentforce Life Sciences.
~7 min read · 14 practice questions
What the exam expects
- Pick the permission sets for an admin, an installer and each field persona.
- Choose custom profiles for admins and field users, and apply the profile best practices.
- Specify the organization-wide defaults and the automatic sharing features the managed package expects, and the setting that must never be turned off through metadata.
- Restrict Admin Console tiles by permission and reason about org default versus profile settings.
- Share the Life Science metadata objects and explain trigger handler administration and Security Exclusion.
- Assign a configuration record to a profile through the Tooling API.
Key terms: persona permission set, a set such as Life Sciences Field Medical that grants one role's features; Life Sciences Core, the set granting the package's Apex classes; Admin Console, the Life Sciences Commercial app's configuration tab; tile filtering, the setting that limits tiles by user permission; hierarchical setting, a configuration set at org default or profile level; LifeSciConfigAssignment, the record linking a configuration record to a profile or user.
Key facts
- Detail
- Assign to all Customer Engagement users, including admins
- Detail
- Life Sciences Commercial Admin and Health Cloud Starter
- Detail
- Clone Standard User; turn off View Setup and Configuration
- Detail
- Rename with
dep_
- Detail
- Turning them off through metadata APIs breaks future upgrades
- Detail
- Public Read/Write internally
- Detail
- Owner-based, All Internal Users to All Internal Users, Read Only
- Detail
- All Admin Console users see all tiles
- Detail
- Commercial Admin permission set and Customize Application
- Detail
- Profile or User
Sources for this section (8)
- Assign Permission Setshelp.salesforce.com (opens in a new tab)
- Get Your Org Readyhelp.salesforce.com (opens in a new tab)
- Custom Profileshelp.salesforce.com (opens in a new tab)
- Profile Best Practiceshelp.salesforce.com (opens in a new tab)
- Metadata Object Sharing Ruleshelp.salesforce.com (opens in a new tab)
- Filter Admin Console Tileshelp.salesforce.com (opens in a new tab)
- Manage Trigger Handlershelp.salesforce.com (opens in a new tab)
- LifeSciConfigAssignmentdeveloper.salesforce.com (opens in a new tab)
- When tile filtering is on, which permission opens the Error Log Management tile?
- Why must every Customer Engagement user also be assigned to a territory?
- Which LifeSciConfigFieldValue field stores a true or false value, and what is its default?
- At which two levels can a hierarchical Admin Console configuration be set?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the Agentforce Life Sciences Consultant pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 21 lessons of the Agentforce Life Sciences Consultant guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Practice exams purchase adds inline bank questions and topic practice (14 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Choose guide-only, practice-only, or save $4 with both