nerdexam
Microsoft

PL-600 · Question #167

You are implementing a model-driven app for a national chain of retail stores. You have the following requirements: - Store employees must be able to view data for their store only. - Regional…

The correct answer is C. Manager hierarchy D. Security roles E. Owner teams. To implement varying data access levels based on organizational structure and roles in a model-driven app, security roles, manager hierarchy, and owner teams are crucial components of the Dataverse security model.

Submitted by anjalisingh· Apr 18, 2026Architect a solution

Question

You are implementing a model-driven app for a national chain of retail stores. You have the following requirements: - Store employees must be able to view data for their store only. - Regional managers must be able to view data for all stores in a region. - The reporting team must be able to view all data across all stores. You need to configure system security. Which three security methods should you use? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Options

  • AAccount hierarchy
  • BAzure AD security group
  • CManager hierarchy
  • DSecurity roles
  • EOwner teams

How the community answered

(69 responses)
  • A
    16% (11)
  • B
    9% (6)
  • C
    75% (52)

Why each option

To implement varying data access levels based on organizational structure and roles in a model-driven app, security roles, manager hierarchy, and owner teams are crucial components of the Dataverse security model.

AAccount hierarchy

Account hierarchy is used to organize customer accounts, not as a direct method for controlling user security access to records in Dataverse.

BAzure AD security group

Azure AD security groups are primarily used for managing access to environments and apps in Power Platform, but not for granular record-level security within Dataverse itself.

CManager hierarchyCorrect

Manager hierarchy security allows managers to access data owned by their direct reports and themselves, effectively granting regional managers access to all stores in their region.

DSecurity rolesCorrect

Security roles define a collection of privileges that control access to tables and records, enabling the configuration of different access levels for employees, managers, and reporting teams.

EOwner teamsCorrect

Owner teams can be used to grant access to a group of users for records owned by the team, allowing for flexible record-level security, such as restricting store employees to their store's data.

Concept tested: Dataverse Security Model

Source: https://learn.microsoft.com/en-us/power-apps/developer/data-platform/security-model

Topics

#Model-driven app security#Security roles#Hierarchical security#Team ownership

Community Discussion

No community discussion yet for this question.

Full PL-600 Practice