PL-200 practice question 285

Security Measure for Unnecessary user access to client data during verification: Assign records to a service account and add the team member doing the verification by using an access team — an access team grants privileges on one specific record to the individual users added to it, so the verifier gets exactly the access needed for the record under review and nothing else, while ownership stays with a neutral service account. Assigning the records to the verifier and dropping the table to Basic (User) scope would make that person the owner and would still expose every record they own, and sharing the record directly is a manual, per-record permission that is harder to manage and revoke than an access team driven by the service request process. Security Measure for Unnecessary user access to client data after the request is completed: Assign records to the QV team when the service request is completed — reassigning ownership to the Quality Verification team removes the individual verifier's ownership-based access once the work is done, while keeping the completed records available to the team that legitimately needs them for quality review. Leaving the records on the service account or on the individual team member would either strand the data with no business owner or leave the verifier with continued access to client data after the request has closed.