Salesforce Certified Identity and Access Management Designer — Question 30

Universal Containers (UC) has decided to use Identity Connect as its Identity Provider. UC uses Active Directory (AD) and has a team that is very familiar and comfortable with managing AD groups. UC would like to use AD Groups to help configure Salesforce users.
Which three actions can AD Groups control through Identity Connect? (Choose three.)

Answer options

• A. Public Group Assignment
• B. Role Assignment
• C. Custom Permissions Assignment
• D. Granting Report Folder Access
• E. Permission Sets Assignment

Correct answer: A, B, E

Explanation

AD Groups can control Public Group Assignment, Role Assignment, and Permission Sets Assignment through Identity Connect. The other options, Custom Permissions Assignment and Granting Report Folder Access, are not managed by AD Groups in this context, making them incorrect choices.