PL-900 Practice Question: Manage the Microsoft Power Platform environment
A company has a Power Apps app that uses Microsoft Dataverse. They need to ensure that only users with a specific security role can access the app. Where should the administrator configure this?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
App-level permissions in the Power Apps app settings
To control access to a specific Power Apps app based on security roles, the administrator should configure app-level permissions in the Power Apps app settings. This allows the app owner to assign which security roles (from Dataverse) can use the app. Option B (Environment-level security roles) controls access to the entire environment, not individual apps. Option C (Dataverse security roles in the 'Roles' area) manages data permissions, not app access directly. Option D (Sharing directly from maker portal) shares with individuals or groups, but not role-based access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
App-level permissions in the Power Apps app settings
Why this is correct
You can assign security roles to control access to the app.
- ✗
Environment-level security roles in Power Platform Admin Center
Why it's wrong here
Environment roles control access to the environment, not specific apps.
- ✗
Dataverse security roles in the 'Roles' area of the environment
Why it's wrong here
Dataverse roles are broader; app-specific roles are set in the app settings.
- ✗
Share the app with users directly from the Power Apps maker portal
Why it's wrong here
Sharing is for individual users, not roles.
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
Related to this question
About these practice questions
Courseiva writes every PL-900 question from scratch — 904 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.