Exam MB-300 topic 3 question 68 discussion

I believe A is the correct answer. B. View payment journal transactions is a privilege NOT permission level. C. CAN NOT assign the privilege to the user directly D. CAN NOT assign the duty to the user.

A is the answer because it is clearly written that "Purchasing manager role must be able to" view. B, C, & D talks about "separate assignment" to user and not to the role.

B. Edit the existing role and assign the View payment journal transactions permission level. Explanation: In Dynamics 365 Finance, security roles are typically configured by assigning permission levels (which contain duties) to roles. Editing the existing role and assigning the "View payment journal transactions" permission level is the most straightforward and standard way to grant the necessary access to view payment journals. You don't need to create a new privilege or a new security role for this specific requirement. Assigning the appropriate permission level to the role directly is the appropriate approach.

D can be the correct answer if the wording is assigning the modified duty instead of assigning "purchasing manager duty" to a new duplicated role. The learning path does recommend we always create new roles if a change is needed.

Confirmed by the relationships between components A. Duty can be assigned to a role B. Permission cannot be assigned to a role C. Privilege cannot be assigned to a user D. Duty cannot be assigned to a user

A - can do that, but not best practice. Duplicate duty then edit it with view only, assign new duty to role. C- adding new privileges to user , is not right. Can assign privileges to role first. SO, C is also not right, not best practice either.

A is the correct Answer 100% sure

d is correct answer as the duties cant be edited, it can be created

I think answer is B. A. There is no such duty assigned to the purchasing manager role. B. A privilege by definition specifies the level of access (or permission level in this answer)that is required to perform a job and they can be assigned to roles directly, even though it's not recommended. C. It should be role level, not user. D. It should be role level, not user.

answer is 100% A

Answer is C. Thou it is not the best practice but this is the only correct answer. A - You cannot edit the duty to view only. B - You cannot assigned permission directly to the role. D - There's no sense of creating new security role if you are not going to use it. Based on the D you will assigned the duty not the newly created role

This is without a doubt, A. However, in this case I would duplicate the duty, and then add the privilege to that. Do not want to alter Out of the Box security.

hi any one can ping me? [email protected]

++ I know A is not the perfect answer (due to best practice)

The answer should be B.

Correct answer is C.

The answer should be C.