Exam PL-600 topic 2 question 52 discussion

1 = share the canvas app with the auditor team, you should use Azure Active Directory (AAD) security groups. AAD security groups allow you to easily manage and assign access to apps for specific teams or groups within your organization. 2 = To ensure account balance values in Power BI are only viewable by the investment team, you can use Column Level Security in Power BI. This feature allows you to restrict access to specific data columns based on user roles or attributes. 3=To streamline user administration and role assignment, you can use a combination of Security Roles within the Power Platform (for model-driven and canvas apps) and Azure AD (for app access). Security Roles help you define roles within your Power Platform apps, while Azure AD security groups assist in managing access to apps and resources. These components work together to streamline user administration and role assignment.

1.Azure Active Directory security group 2.Column-level security 3.Security roles

Share a canvas app with the auditor team: AAD Security Group Canvas apps are shared with users or Azure AD security groups. Ensure account balance values in Power BI are only viewable by the investment team: Column-level security Power BI supports column-level security (via row-level security and DAX filters) to restrict access to specific data fields like account balances. Streamline user administration and role assignment: AAD Security Group Azure AD security groups can be used to assign security roles in Power Platform and manage access to apps, environments, and data.

1. AAD Group 2. Column Security 3. AAD Group

I would argue: Security Role, Report Access and Azure Group.

For the last one, I do not see how Manager Hierarchy is the answer. I would have selected Azure AAD Groups again. (same as #1). I would not use the hierarchy as it doesn't, in my opinion, actually do the requirement of making user administration and role assignment easier.

The second one I find confusing. I would assume account balance value is column and not a whole model. So "Report access" will work but then you don't see the whole report in Power BI and not just the account balance value. Column-level security does not exist in Power BI, it is called "Object level security" but needs to be done with external tools because Power BI Desktop can't do OLS.