Exam MS-100 topic 3 question 85 discussion

Microsoft says: A user is automatically associated with the Environment Maker role when they are added to an environment. https://docs.microsoft.com/en-us/learn/modules/get-started-security-roles/2-roles

Just created a new environment and added a dataverse DB. Added a basic E3 user (no admin roles) to the environment. They were automatically given both 'Basic user' and 'Environment Maker' roles.

B. System customizer Environments with a Dataverse database If the environment has a Dataverse database, a user must be assigned the System Administrator role instead of the Environment Admin role for full admin privileges, as described in the following table. For users who make apps that connect to the database and need to create or update entities and security roles, you need to assign the System Customizer role in addition to the Environment Maker role. This is necessary because the Environment Maker role doesn't have privileges on the environment's data. https://learn.microsoft.com/en-us/power-platform/admin/database-security#predefined-security-roles

doesn't seem like an ms-100 question to me

From the reference link (https://docs.microsoft.com/en-us/power-platform/admin/database-security#predefined-security-roles) "Environment Maker and Environment Admin are the only predefined roles for environments that have no Dataverse database" as this environment contains a database, it doesn't sound like the answer is A.

A. The default environment A single default environment is automatically created by Power Apps for each tenant and shared by all users in that tenant. Whenever a new user signs up for Power Apps, they're automatically added to the Maker role of the default environment. The default environment is created in the region closest to the default region of the Azure AD tenant. https://docs.microsoft.com/en-us/power-platform/admin/environments-overview

Dataverse

https://docs.microsoft.com/en-us/power-platform/admin/assign-security-roles In the Finance and Operations linked Dataverse environment, Finance and Operations Basic User and Environment Maker security roles are automatically assigned to all active users in Dataverse.

In exam today

A A For the Default environment type, “BasicUser” and “EnvironmentMaker” roles will be assigned automatically to all users added in Dataverse. https://docs.microsoft.com/en-us/power-platform/admin/assign-security-roles

So why is the answer still B -System customizer? which one is which?

In exam today

We have this exact problem in our tenant. We do not want to use the Power Platform and every user gets on default the enviroment maker role. The answer is A

According to this link the answer should be: A. Environment Maker https://docs.microsoft.com/en-us/power-platform/admin/assign-security-roles

It is not about any role, it is about “Which —-— security ——-role for Environment1”

Correct