Question
You are designing the organization structure for a company that has 5,000 users.
You need to configure security roles for the company while minimizing administrative effort.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Explanation
Apply a security role to everyone in a business unit.: Assign the security role to the default business unit team. — Dataverse automatically creates a default (owner) team for every business unit, and every user in that business unit is automatically a member of it, with membership maintained by the platform as users are added, moved, or removed. Assigning the role to that default team therefore grants it to all 5,000 users with no ongoing maintenance, whereas assigning the role individually to each user would mean thousands of manual assignments, and creating a new team and adding the business unit users would require you to keep that team's membership in sync by hand.
Ensure an individual can see records in their current business unit and a child business unit.: Grant the user the Parent: Child Business Units security permission. — In a security role, each privilege has an access level, and the Parent: Child Business Units level extends access from the user's own business unit down to all of its child (subordinate) business units, which is exactly the scope required. Granting a security role from the child business unit would not extend the user's access upward or across in the hierarchy in the way needed here, and a role from the root business unit is not the mechanism that controls scope — the access level on the privilege is; a root-level Organization-scoped role would also over-grant by exposing records across the entire organization.
