A user has access to an existing Common Data Service database. You need to ensure that the user can create canvas apps that consume data from Common Data Service. You must not grant permissions that…

The correct answer is D. Environment Maker. The Environment Maker role is the correct least-privilege choice. It grants users the ability to create new resources within a Power Platform environment - including canvas apps, flows, and connections - and to read data from Dataverse (Common Data Service). 'Environment Admin'…

Create apps by using Microsoft Power Apps

Question

A user has access to an existing Common Data Service database. You need to ensure that the user can create canvas apps that consume data from Common Data Service. You must not grant permissions that are not required. Which out-of-the-box security role should you assign to the user?

Options

AEnvironment Admin
BSystem Customizer
CCommon Data Service User
DEnvironment Maker

How the community answered

(56 responses)

A
13% (7)
B
4% (2)
C
7% (4)
D
77% (43)

Explanation

The Environment Maker role is the correct least-privilege choice. It grants users the ability to create new resources within a Power Platform environment - including canvas apps, flows, and connections - and to read data from Dataverse (Common Data Service). 'Environment Admin' has full administrative control, which is excessive. 'System Customizer' allows customization of Dataverse schema (tables, forms, views), which is more than needed. 'Common Data Service User' can read/write data but cannot create canvas apps. Environment Maker provides exactly the permissions needed: create apps and connect to CDS data, nothing more.

Topics

#Security Roles#Environment Maker#Canvas Apps#Least Privilege

Community Discussion

No community discussion yet for this question.

Full PL-200 Practice