Exam PL-400 topic 8 question 12 discussion

DRAG DROP -
You have several model-driven apps.
You must ensure that app creators and system administrators can customize the apps. You must follow the principle of least privilege.
You need to assign the permissions that are needed for app creators and system administrators.
Which security roles should you assign? To answer, drag the appropriate roles to the correct requirements. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point
Select and Place:

Suggested Answer:
Box 1: System Customizer -
System Customizer - Create (self), Read (self), Write (self), Delete (self), Customizations
Has full permission to customize the environment. However, can only view records for environment tables that they create.
Box 2: System Administrator only

System Administrator -
Create, Read, Write, Delete, Customizations, Security Roles
Has full permission to customize or administer the environment, including creating, modifying, and assigning security roles. Can view all data in the environment.
Box 3: System Administrator only
Reference:
https://docs.microsoft.com/en-us/power-apps/maker/model-driven-apps/share-model-driven-app