Microsoft Certified Power Platform Fundamentals · Free Practice Question Medium
Question 26
Scenario: Honest Eddie's Car Dealership is an establishment in South Carolina USA, which is dedicated to the purchase and sale of cars and light trucks. Eddie wants to deploy a service using building model-driven apps.
When Eddie shares his model-driven app, which of the following statements is true?
-
A
Users just need to be added to a predefined security role
-
B
Users need to be added to a predefined or custom security role and one or more security roles need to be associated with the app.
-
C
Users can be added to a predefined or custom security role or use RBAC to be associated with the app.
-
D
Model-driven apps do not need to be shared, they are accessible to anyone with the app link.
Reveal correct answer
Correct answer: B
Explanation
Users must have a security role that grants them the right to access the app for you to successfully share the app.
Microsoft Power Apps use role-based security for sharing. A security role includes privileges that define a set of actions that can be performed in the app. All app users must be assigned to one or more predefined or custom security roles.
Roles can be assigned to individual users or to teams. When a user or a team is assigned to a role, that user or all members of that team are granted the set of privileges associated with the role.
To share an app, you must have the Environment Admin or System Admin role.
Create or set up a security role
The Power Apps environment includes predefined security roles. These roles reflect common user tasks, and the access levels that are defined follow the security best practice of providing access to the minimum amount of business data that is required to use the app.
Apps can be based on a custom table. Because the table is custom, privileges must be explicitly specified before users can work in it. To do this, you can use either of the following approaches:
Expand an existing predefined security role so that it includes privileges for rows that are in the custom table.
Create a custom security role to manage privileges for users of the app.
Security roles control a user's access to data through a set of access levels and permissions. The combination of access levels and permissions that are included in a specific security role sets limits on the user's view of data and interactions with that data.
One or more security roles must be assigned to the app. The apps that users can use depend on the security roles they are assigned to.
The following predefined roles are available with a Power Apps environment. Unless otherwise noted, all the privileges have global scope.
PREDEFINED SECURITY ROLES
A. Simply adding users to a predefined security role may not provide the necessary level of access and permissions required to use the model-driven app effectively. Multiple security roles may be needed to ensure proper access control.
B. In order for users to access a model-driven app, they need to be added to a predefined or custom security role. Additionally, one or more security roles need to be associated with the app to define the level of access and permissions for each user.
C. Users can be added to predefined or custom security roles or use Role-Based Access Control (RBAC) to be associated with the app. This allows for fine-grained control over user access and permissions within the model-driven app environment.
D. Model-driven apps do need to be shared in order for users to access them. They are not automatically accessible to anyone with the app link. Sharing the app and associating security roles are essential steps to control access and permissions.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
