PL-900 Demonstrate the capabilities of Power Apps Practice Question
A business analyst creates a model-driven app to manage customer service cases. The app includes a custom form with a field called 'Priority' that has three options: Low, Medium, High. The analyst wants to ensure that only users in the 'Service Managers' security role can change the priority of a case. What should the analyst do?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure a field security profile for the Priority field and grant read-only access to other roles.
Field security profiles allow restricting write access to specific fields based on user roles. Option B is wrong because editing the Service Manager security role to include write privileges for the Case entity would grant write access to all fields, not just Priority, and would not restrict other roles. Option C is wrong because setting the field to 'Read-Only' in the form editor applies to all users, not based on roles. Option D is wrong because a business rule to hide the field does not prevent users with direct URL access or other methods from changing the field; it only hides it in the form.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Configure a field security profile for the Priority field and grant read-only access to other roles.
Why this is correct
Field security profiles control read and write access per field per role.
- ✗
Edit the Service Manager security role to include write privileges for the Case entity.
Why it's wrong here
Entity-level privileges do not restrict specific fields.
- ✗
Set the Priority field to 'Read-Only' in the form editor.
Why it's wrong here
Form settings are not security controls and can be bypassed.
- ✗
Create a business rule to hide the field when the user is not a Service Manager.
Why it's wrong here
Business rules run on the form but do not enforce server-side security.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PL-900 question from scratch — 904 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.