PL-300 Build permission Practice Question
You are a Power BI administrator. A user in the Sales department needs to create reports using a shared dataset, but should not be able to modify the dataset or share it with others. What is the minimum permission level you should assign to the user on the dataset?
⚠ Common exam trap
A common trap is to select Read, thinking it's sufficient for report creation, but Read only allows viewing, not building. Build is the minimum permission needed.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Build
The correct option is B, Build, because the Build permission on a shared dataset allows a user to create new reports and content based on that dataset without granting rights to edit the dataset itself or reshare it. This matches the requirement of report creation with no dataset modification or sharing capability. Reshare (A) would allow the user to share the dataset with others, which is explicitly prohibited. Write (C) grants broader editing rights over the dataset, and Read (D) only permits viewing existing content, not authoring new reports from the dataset.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Reshare
Why it's wrong here
Reshare is an additive right that allows the recipient to share the dataset with other users, but it does not itself include authoring or reading capabilities. Granting Reshare alone would not let the sales user build a new report; moreover, it would permit the user to expand access beyond the original group. To meet the requirement, Reshare would need to be combined with Build, so it is not the correct selection.
- ✓
Build
Why this is correct
Build permission specifically grants the right to connect to the dataset as a source for new reports and to create new visualizations in the Power BI service or Power BI Desktop. It is the minimal permission because it satisfies the user's need to author new sales reports without exposing write capabilities or allowing resharing. With Build, the user can create and save new reports, but cannot modify the dataset or grant access to others.
- ✗
Write
Why it's wrong here
Granting Write permission gives the recipient the ability to change the dataset itself—for example, modifying queries, measures, or scheduled refresh settings—and potentially publish a slightly updated dataset definition. The sales department user only needs to create new reports, not alter the underlying data model. Assigning Write would exceed the minimum privilege needed and introduces unnecessary risk of unintended changes to a shared semantic model.
- ✗
Read
Why it's wrong here
Read permission only allows a user to view and interact with existing reports or dashboards that use the dataset; it does not include the ability to build new content or connect to the dataset as a data source in Power BI Desktop. Since the user's requirement is to create a new sales report, Read lacks the essential authoring capability that Build provides. Without Build, any attempt to create a report would be blocked by the service.
Go deeper
Related to this question
About these practice questions
One of 524 original PL-300 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PL-300 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-300 exam.