Exam PL-200 topic 1 question 34 discussion

Environment make doesnt have the permissions to use dataverse, Environment admin has too many rights, so the answer is system customizer

1. This is an updated question. It is the same as Question 21 but instead Common Data Service (CDS) database it says Microsoft Dataverse database. CDS was the former name of the Microsoft Dataverse. Also, there is here the option Basic User, that is the new name for the Common Data Service user that is in the question 21. 2. The answer C is CORRECT because: A) although the Environment Maker role doesn't have privileges on the environment's data, here the question establishes that the user already has access to the database. And B) the question does not mention that the user needs to create or update entities, its requirement is just to create apps. So the user does need to have access to data, but not necessarily customize anything

Y'all are killing me with the System Customizer bit. Yes, you need that role to access the data. On the other hand: "A user has access to an existing Microsoft Dataverse database...."

Clearly it is D: Resource Environment Maker Environment Admin System Customizer System Admin Canvas app X X X X Cloud flow X (non–solution-aware) X X X Connector X (non–solution-aware) X X X Connection* X X X X Data gateway X X - X Dataflow X X - X Dataverse tables - - X X

D: System Customizer -From MS Learn- Users who make apps that connect to Dataverse and need to create or update table and security roles need to be assigned the System Customizer role in addition to the Environment Maker role. This is necessary because the Environment Maker role doesn't have privileges on the environment's data.

Question was NOT on the Exam - Jan 29, 2024

in my opinion, it’s not C because the Environment Maker role does not have any privileges to access data within an environment. This means that the user cannot consume data from Dataverse, even if they have access to the existing database. The user needs a security role that gives them read and write access to the data, such as the System Customizer role. The Environment Maker role can only create and customize apps, connections, custom APIs, gateways, and flows using Microsoft Power Automate

B. Basic User To allow a user to create canvas apps that consume data from Dataverse without granting unnecessary permissions, you should assign the "Basic User" security role. This role provides the necessary access for app creation and data consumption without granting extensive administrative privileges. The other roles, such as Environment Admin, Environment Maker, and System Customizer, typically have broader access and control over the environment, which may not be required for the user's purpose of creating canvas apps.

Same as question 21 but instead of CDS is says Dataverse

C is correct

Environment Maker: Can create new resources associated with an environment, including apps, connections, custom APIs, gateways, and flows using Microsoft Power Automate. However, this role doesn't have any privileges to access data within an environment. More information: Environments overview Environment makers can also distribute the apps they build in an environment to other users in your organization. They can share the app with individual users, security groups, or all users in the organization https://learn.microsoft.com/en-us/power-platform/admin/database-security

correct

I think C is the answer.

The first sentence of the question is "A user has access to an existing Microsoft Dataverse database". So, I think it´s "Environment Maker" because the privilleg to access the Dataverse data is already existing in this situation.

It seems to me C. Can a user have access to a database and does not have permission to read? It seems the following is trying to say that the user has already read-permission. "A user has access to an existing Microsoft Dataverse database." If consume means only read-permission, it is already granted to the user.

"You need to ensure that the user can create canvas apps that consume data from Dataverse." - While they need to be an Environment Maker, without System Customizer role they will not have privileges on the environment's data.

The correct answer is C and D (mainly D). According to docs: For users who make apps that connect to the database and need to create or update entities and security roles, you need to assign the System Customizer role in addition to the Environment Maker role. This is necessary because the Environment Maker role doesn't have privileges on the environment's data. https://docs.microsoft.com/en-us/power-platform/admin/database-security#predefined-security-roles%20https://docs.microsoft.com/en-us/powerapps/maker/canvas-apps/data-platform-create-app