Question 206 - Certified Health Cloud Accredited Professional discussion

A is correct because administrators can restrict access to patient or member lists using standard Salesforce sharing settings on the list. The Patient List object has an organization-wide default sharing setting that determines the baseline access level for all users in the org. Administrators can also use sharing rules, manual sharing, or Apex managed sharing to grant additional access to specific users or groups.

B is correct because users with profile or permission sets that restrict access to an object cannot create a list using that object. Users need to have at least read access to the objects and fields that they want to use as filters or display columns in their lists. Administrators can check and modify the user's object and field permissions from their profile or permission set.

C is incorrect because administrators cannot restrict access using HCPatientListSecurity custom setting. This custom setting is used to control the visibility of patient or member lists in the Patient List tab, not the access to the lists. Administrators can use this custom setting to specify which lists are visible to which profiles or permission sets, or hide all lists from a profile or permission set.

D is correct because when a user's field-level security restricts access to a field used as a display column, the column does not appear in the list. This is because the field-level security settings override the list settings and prevent the user from viewing the field value. Administrators can check and modify the user's field-level security settings from their profile or permission set.