Exam PL-400 topic 2 question 50 discussion

I would say A https://www.linkedin.com/pulse/connect-dataverse-using-managed-identity-without-client-pieter-dubois/ The guy creates an app user and assigns MI to it. He also says to configure the required security roles for this user. "Complete the entry with the correct Business Unit and assign the necessary security role(s)" B doesn't make sense as the Mis have their own identity to which the roles are assigned C doesn't make sense for the above reasons as well. Where would env admin role come from? You would need to assign it to the MI first. D same as C

✅ Explanation: In Microsoft Dataverse, when you use Managed Identities (like for an Azure Function or Logic App) to access Dataverse, the access is done through an application user that’s created in Dataverse and linked to the Azure AD app representing the managed identity.

https://learn.microsoft.com/en-us/power-platform/admin/set-up-managed-identity#create-a-new-app-registration-or-user-assigned-managed-identity

✅ Answer: A. Permissions assigned to the corresponding application user Summary: A managed identity in Dataverse gets only the permissions assigned to its corresponding application user. It does not inherit admin rights or user-triggered permissions.

Must be B

https://learn.microsoft.com/en-us/purview/register-scan-dataverse?tabs=MI

You have to add an application user and then add the Managed Identity as an app

D is the correct answer

It should be B

B. Managed identities = Azure https://learn.microsoft.com/en-us/power-apps/maker/data-platform/azure-synapse-link-msi

C. permissions equivalent to the environment admin role