Exam PL-600 All Questions

View all questions & answers for the PL-600 exam

Exam PL-600 topic 2 question 2 discussion

Actual exam question from Microsoft's PL-600

Question #: 2
Topic #: 2

HOTSPOT -
You are designing a Microsoft Power Platform solution for a company.
You have the following requirements:
✑ Users in the human resources department must be able to create tasks.
✑ Users in the human resources department must be able to assign cases to other users.
You create a table for cases and tasks. You need to recommend security settings to the company.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Box 1: Assign only Create rights to activities
You require the same set of Dataverse privileges and access rights to work with custom activities as those required to work with custom entities.
Task-based privileges, at the bottom of the form, give a user privileges to perform specific tasks, such as publish articles.
Box 2: Assign User-level assign rights to human resources case table.
Record-level privileges define which tasks a user with access to the record can do, such as Read, Create, Delete, Write, Assign, Share, Append, and Append To.
For user and team owned records, the access level choices for most privileges are tiered Organization, Business Unit, Business Unit and Child Business Unit or only the user's own records. That means for read privilege on contact, I could set user owned, and the user would only see their own records.
Incorrect Answers:
For security purposes, records that are organization owned, the only access level choices is either the user can do the operation or can't.
Reference:
https://docs.microsoft.com/en-us/power-platform/admin/security-roles-privileges https://docs.microsoft.com/en-us/power-platform/admin/wp-security-cds

by VJ345 at April 26, 2022, 6:56 p.m.

Comments

Submit Cancel

VJ345

Highly Voted 3 years, 1 month ago

For Create task, User needs read permission also. Ans: 1 --> B, 2-->D

upvoted 42 times

BrettusMaximus

2 years, 10 months ago

First answer is A Is doesn't say they need to read. The create could take place in a flow.

upvoted 3 times

dudenKo

2 years, 10 months ago

you need the Read right to see the activities, so Read is the minimum right to the table to be able to Create a row

upvoted 1 times

KarthikSiva3535

2 years, 6 months ago

question does not mention the need to read the created task. Just create will do. 1-> A; 2->D

upvoted 7 times

...

OldHand1

1 year, 10 months ago

No, you only need the read access if you are going to create and OWN the record. You can create it and somebody else can own it.

upvoted 5 times

OldHand1

1 year, 10 months ago

link here: https://learn.microsoft.com/en-us/power-apps/developer/data-platform/security-access-rights

upvoted 4 times

dylan99

1 year, 3 months ago

A user should see "You do not have permission to access these records" by creating a record without having read permission, so I think it's technically possible. Anyway @OldHand1, it looks (even from your link) that assigning read permission is the normal case, in which if someone needs to create a record he should be even able to see it if not specified a "ONLY create permission"

upvoted 1 times

dylan99

1 year, 3 months ago

Errata corrige: The Create privilege controls whether you can create a record. If you have the Create privilege with Local, Deep, or Global access, you can create records for other users. If you have Create and Read privileges with Basic access, you can create records for yourself. https://learn.microsoft.com/en-us/dynamics365/customerengagement/on-premises/developer/security-dev/use-record-based-security-control-access-records?view=op-9-1

upvoted 1 times

...

seeusoubesse

1 year, 9 months ago

I tried to create a task without read permission and was not able to do it, because I could not event see the button to create an activity. So regarding 1 it should be answer 'B'.

upvoted 3 times

...

Icky

Highly Voted 3 years ago

I think #1 is - 2: Create and Read rights. You need to be able to see the record that you have created after 7. Read is also required. #2 - 4: Assign organization level assign rights. They need to be able to assign cases to other users. It could be a case that anyone owns.

upvoted 10 times

...

WASSIM2020

Most Recent 4 months, 2 weeks ago

1. Create and Read rights to activities 2. Assign user-level assign rights to the human resources case table

upvoted 3 times

...

WASSIM2020

4 months, 3 weeks ago

Users in the human resources department must be able to create tasks: Assign Create and Read rights to activities. Users in the human resources department must be able to assign cases to other users: Assign user-level assign rights to the human resources case table.

upvoted 1 times

...

Tootru2bReal

4 months, 4 weeks ago

1. Create and Read rights to activities 2. Assign user-level assign rights to the human resources case table. (Rarely will you EVER give organization level rights). The HR department is NOT the only department in the company. Giving organization rights gives everyone everything on this table. The users only need to assign cases to other users. Now, were they super specific with "their" cases, no. But they are only talking about one department, not an entire company.

upvoted 2 times

...

Schinna

11 months, 1 week ago

BD are correct

upvoted 1 times

...

MrEz

1 year, 3 months ago

"You create a table for cases and tasks. " --> what??! next to the OOTB you create custom table for cases and tasks??! seriously :-(.

upvoted 2 times

...

SashM

1 year, 10 months ago

I think both answer are C.

upvoted 2 times

...

OldHand1

1 year, 10 months ago

First one is Create Rights only. You only need create to create a record. You do NOT need read in order to create a record, you just can't create and OWN it. Says as much in document here: https://learn.microsoft.com/en-us/power-apps/developer/data-platform/security-access-rights

upvoted 2 times

...

ymiya

2 years, 2 months ago

Ans: 1 --> A, 2 --> C

upvoted 2 times

...

Brooklyn_Itself

2 years, 5 months ago

Users need read and write for activity creation for #1. Only need assign for #2. With my heavy critique that the prompt indicates these tables were "created" and not indicating that "tasks" are an activity table (out of box tasks are). The question itself lacks appropriate context.

upvoted 2 times

...

CRMBug

2 years, 6 months ago

1. B - Need Create along with Read 2. D - Can assign any cases to any user

upvoted 6 times

...

lianguyen49

2 years, 8 months ago

I would say, 1. Assign only Create rights to activities. Since the question only mention 'Users in the human resources department must be able to create tasks.' It does not mention about read access permission. 2. Assign user-level assign rights to the human resources case table According to the requirement, they need assign cases to other users. So case table should set as User-Level assign instead.

upvoted 1 times

...

radityoardi

2 years, 11 months ago

The question lacks specificity. If you add 1 fact there, it can lead to a different answer completely.

upvoted 2 times

...

Ravikiran206

3 years, 1 month ago

1-> B, 2-> C User level assign rights are enough.

upvoted 8 times

ClairFraser

2 years, 10 months ago

I am with you. No one said they need to be able to assign ALL cases in the systems.

upvoted 1 times

MrEz

1 year, 3 months ago

it said caseS so it is plural and it does not limit it to own cases. and: hr assings cases to users work on. so probably here they manage the staff, who has how much to do. does not necessarily mean they create these cases.

upvoted 1 times

...

Icky

3 years ago

It doesn't say that they need to be able to assign records that they own, only that they need to assign cases to other users, so I think organization is correct.

upvoted 7 times

...

[Removed]

3 years ago

in such case they will be able to assign ony to themselves, which does not make sense

upvoted 4 times

...