Salesforce Certified Slack Administrator free question 1 / 10 · Domain 1: Fundamentals
A Workspace Owner in an Enterprise organization wants every member of their workspace to be required to use two-factor authentication. What does the permissions table say about this setting?
- It is an org policy set by Org Owners or Org Admins, not by Workspace Owners
- Each member turns it on alone; no administrator can make it mandatory
- It needs the Security Admin system role, which a Workspace Owner can assign
- Workspace Owners can require it for their own workspace from workspace settings
Show the answer and explanation
Answer: A
Why this is correct
On Enterprise plans, the permissions page separates organization-level policies from workspace settings. In the organization policies table, the row 'Set mandatory two-factor authentication' has a tick only in the Org Owner/Admin column; the Workspace Owner/Admin and Member columns are empty. That makes a mandatory 2FA requirement something the org administrators set for the organization, rather than something each Workspace Owner switches on. The Workspace Owner in the scenario should raise the request with an Org Owner or Org Admin. Keeping the rule at the org level is what lets one sign-in requirement apply across all of the workspaces an organization runs.
Why the other options are wrong
"Workspace Owners can require it for their own workspace from workspace settings" … For mandatory two-factor authentication, the Workspace Owner/Admin column of the org policies table is empty. In an Enterprise org the requirement is not available from a workspace's own settings.
"Each member turns it on alone; no administrator can make it mandatory" … The table lists 'Set mandatory two-factor authentication' as an organization policy, so an administrator can make it a requirement. It is not left to each member.
"It needs the Security Admin system role, which a Workspace Owner can assign" … The setting is ticked for Org Owner/Admin. The Security Admin system role is described as managing sessions and deactivating accounts, so holding it does not add this policy.
Org policies versus workspace settings
In an Enterprise org, check which column a row is ticked in before deciding who acts. Some org policies can also be handled by Workspace Owners/Admins under conditions shown by a symbol; mandatory two-factor authentication has no entry for them at all. Session management belongs to a different area of the admin tools.