A nonprofit stores a government-issued personal identification number on each constituent's Contact record in an...

To ensure a subset of org users can fully access the government-issued personal identification number stored in an encrypted field on Contact records, the consultant should enable the "View Encrypted Data" system permission on a Permission Set:

View Encrypted Data System Permission:

This permission allows users to view the full unmasked value of encrypted fields.

It is necessary for users who need to access sensitive data stored in encrypted fields.

Steps to Enable the Permission:

Create or update a Permission Set in Salesforce.

Enable the "View Encrypted Data" permission in the System Permissions section of the Permission Set.

Assign the Permission Set to the appropriate subset of users who require access to the encrypted data.

Security Considerations:

Ensure that only trusted and authorized users are granted this permission due to the sensitive nature of the data.

Regularly review and audit Permission Set assignments to maintain security and compliance.

By enabling the "View Encrypted Data" permission, the nonprofit ensures that authorized users can access sensitive data as needed for their roles.