You are creating a plug in that connects to a third-party REST API. The API credentials must be secured so they are visible only to system administrators. The API credentials must not interfere with…

Plug-in secure configuration is specifically designed to store sensitive data like API keys and credentials, encrypting them and restricting visibility to system administrators. This method ensures that the credentials are tied directly to the plug-in registration and remain isolated from other system components.

Text environment variables are generally used for non-sensitive application settings and do not provide the necessary security or restricted visibility for API credentials.

Connection references are used to manage connections to data sources and APIs within Power Apps or Power Automate flows, not as a direct mechanism for securely storing plug-in specific credentials within Dataverse plug-in registrations.

Plug-in unsecure configuration stores data in plain text, making it visible to anyone with access to the plug-in registration, which violates the requirement for secure storage of API credentials.