Exam MB-500 topic 12 question 1 discussion

Yes, should be C and A.

1: Accounts Payable Manager - C. Run the security tool and validate access for the role. : Running the security tool ensures that the Accounts Payable Manager role has the appropriate permissions (including Delete access) for the CashDisc form, as required. Duplicating the role or creating new duties/privileges is unnecessary since the existing role already has the correct access level. 2: Accounts Payable Clerk - A. Create a new role for the AP clerk and restrict delete access for the CashDisc form. : Creating a new role allows you to define a specific privilege for the CashDisc form with View access only, ensuring that Accounts Payable Clerks cannot delete records. Adding a new duty with the existing privilege (which likely includes Delete access) would not meet the requirement to restrict access to View only.

Since account payable manager already has access to the form we extend we don't have to do anything for him so only C is applicable I guess. Account payable clerk has delete access to the form, so even if we added another READ-ONLY privilege to the role, clerk will still have delete access. Only thing we can do here is create new role, duty, ready-only privilege and use that instead for Clerks.

Correct answer is C and A

I think it's B and A Because AP Clerk need to restrict delete access. And the answer will only create new role. So i assume that it use the existing duty and privilege. Then i make the AP manager to create new duty and privilege then add them to the role.

Shouldn't be C, A?