If you want to grant a user access to edit only some reports without full admin rights, which mechanism is appropriate?

If you want to grant a user access to edit only some reports without full admin rights, which mechanism is appropriate?

• A. Inbound email
• B. Delegated Permissions
• C. Create a new persona
• D. Assign to CLM Admin group

Answer: (B)

Controlling access with fine-grained permissions is what this scenario tests. Delegated Permissions let you grant a user the ability to perform specific actions or access particular objects without giving them full admin rights. In this case, you can allow the user to edit only certain reports while preserving restrictions on other areas, aligning with the principle of least privilege. Inbound email is about messaging or intake workflows, not about who can edit content. Creating a new persona would model a different user type but doesn’t inherently provide the precise, limited editing capability across specific reports. Assigning the user to an administrative group would grant broad, system-wide admin rights, which contradicts the requirement to avoid full admin access. So, the mechanism that fits is Delegated Permissions because it enables scoped, restricted editing rights without elevating to full admin privileges.

Controlling access with fine-grained permissions is what this scenario tests. Delegated Permissions let you grant a user the ability to perform specific actions or access particular objects without giving them full admin rights. In this case, you can allow the user to edit only certain reports while preserving restrictions on other areas, aligning with the principle of least privilege.

Inbound email is about messaging or intake workflows, not about who can edit content. Creating a new persona would model a different user type but doesn’t inherently provide the precise, limited editing capability across specific reports. Assigning the user to an administrative group would grant broad, system-wide admin rights, which contradicts the requirement to avoid full admin access.

So, the mechanism that fits is Delegated Permissions because it enables scoped, restricted editing rights without elevating to full admin privileges.