Microsoft Certified Power Platform Fundamentals · Free Practice Question Medium
Question 6
Scenario: Iceberg Lounge is Gotham's coolest nightclub and Penguin's pad for Gotham operations. Oswald Cobblepot runs the show there.
A new employee joins Penguin's sales team and needs to create Power Apps within the Sales environment but should not have access to environments belonging to other departments.
What role should the Oswald assign?
-
A
Environment Maker for the Sales environment
-
B
Environment Admin
-
C
Global admin
-
D
Power Platform Service Admin
Reveal correct answer
Correct answer: A
Explanation
The correct answer is: Environment Maker for the Sales environment
To allow the new employee to create Power Apps only within the Sales environment — and not access other environments — the most appropriate role is: Environment Maker (scoped to the Sales environment)
This role allows users to:
Create apps, flows, and connections.
Share apps within that specific environment.
But not manage other environments or administrative settings.
Assign the user the Environment Maker role only in the Sales environment through:
Power Platform Admin Center > Environments > Sales > Settings > Security roles > Add user to Environment Maker
Why the other roles are incorrect:
Global admin
Too powerful — gives full access to all environments and Microsoft 365 tenant settings.Environment Admin
Allows managing all resources in the environment (security roles, permissions, etc.), not just creating apps.Power Platform Service Admin
Broad administrative role — grants visibility into all environments, analytics, and settings across the tenant.
A. Environment Maker for the Sales environment is the correct choice because this role allows the user to create and manage environments, apps, and flows within a specific environment. It restricts the user's access to only the Sales environment, ensuring they do not have access to environments belonging to other departments.
B. Environment Admin is not the correct choice as this role provides administrative access to a specific environment, including the ability to manage settings and resources within that environment. However, it does not restrict access to other environments, so it does not meet the requirement of limiting access to the Sales environment only.
C. Global admin is not the correct choice as this role has unrestricted access to all environments and resources within the Power Platform. Assigning this role to the new employee would give them access to environments belonging to other departments, which goes against the requirement of restricting access.
D. Power Platform Service Admin is not the correct choice as this role has administrative access to the entire Power Platform service, including all environments and resources. Assigning this role to the new employee would give them access to environments belonging to other departments, which is not in line with the requirement of restricting access to the Sales environment only.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
