Exam PL-600 topic 2 question 38 discussion

Actual exam question from Microsoft's PL-600

Question #: 38
Topic #: 2

A company is creating a Microsoft Power Platform app to enable employees to log daily time entries. Employee user accounts are in multiple Azure AD tenants and are not located in the tenant that is running the app.

Employees must be added as Azure AD guest accounts within the tenant that will be running the app. Employees must access the model-driven app by being a member of a security team. The security team has been assigned the Employee Security role. Employees must create personal views of records to view within the system.

You need to implement a security solution.

Which privilege should you use?

A. Direct basic level
B. Shared app access
C. Team
D. Azure AD security group

Show Suggested Answer

Suggested Answer: C 🗳️

by MrWood47 at Feb. 22, 2023, 8:07 p.m.

Comments

Submit Cancel

WASSIM2020

5 months ago

Selected Answer: A

i Agree with MeEz : a) but incorrect name, correct name is: 'Direct User (Basic) access level and Team privileges' Using the Direct User option treats privileges as if they were directly assigned to the user. By using this option, you can avoid having to assign security roles to users and instead use teams and security roles that are assigned to teams. https://learn.microsoft.com/en-us/power-platform/admin/security-roles-privileges

upvoted 1 times

...

MrEz

8 months, 3 weeks ago

Since when is 'Team' (what kind of team?) a 'privilege'? this confused me very much in the question, but Yes team what they want to hear even though the question is wrong.

upvoted 2 times

MrEz

8 months, 3 weeks ago

Employees must be added as Azure AD guest accounts within the tenant that will be running the app. You could combine the AD security group with dynamics CRM owner teams: but then which one is the solution: the henn or the egg?

upvoted 1 times

MrEz

8 months, 3 weeks ago

a) but incorrect name, correct name is: 'Direct User (Basic) access level and Team privileges' Using the Direct User option treats privileges as if they were directly assigned to the user. By using this option, you can avoid having to assign security roles to users and instead use teams and security roles that are assigned to teams.

upvoted 2 times

MrEz

8 months, 3 weeks ago

but to be very precise: this is an option not a 'privilege' itself.

upvoted 1 times

...

rober13

1 year, 4 months ago

Selected Answer: C

I agree with C, you can assign AAD Security Group to a team.

upvoted 2 times

...

CESBCN

1 year, 6 months ago

Selected Answer: C

In Dynamics 365 and the Power Platform, teams can be used to assign security roles and control access to various entities and records. In this case, employees need to be members of a security team to access the model-driven app. The security team has already been assigned the Employee Security role. By creating a team and adding employees as members, you can ensure that they have the necessary privileges and access to use the app effectively. The Employee Security role assigned to the team will define the permissions and access levels granted to the employees.

upvoted 4 times

...