What is the recommended security approach to satisfy this requirement?

Universal Containers has a custom Salesforce UI that is used by all users to check on a container’s status. This check is done via an integration to its back-end system which all users have access to. However, some users have a higher privilege access into that back-end system, which allows them to retrieve more details in the same container status check. Those users would like the same Salesforce UI to recognize their higher privilege access and display those extra details for them, but without allowing all users to see the same level of details.

What is the recommended security approach to satisfy this requirement?
A . Named credential set with "per-user" identify type to control the Apex callout.
B . Custom permission to control the Apex callout to retrieve different levels of details.
C . Hierarchical custom setting to store back-end system user credentials and referenced in the Apex callout.
D . Permission set to identify users with higher-level privileges in order to control the Apex callout.

Answer: A

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments