PL-900 Practice Question: Manage the Microsoft Power Platform environment
A Power Platform administrator needs to delegate the ability to create and manage environments to a specific user without granting full Power Platform administrator privileges. The administrator wants to follow the principle of least privilege. What should the administrator do?
⚠ Common exam trap
The trap here is assuming that a single role can grant both environment creation and management; in reality, these are separate permissions that must be combined.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Assign the Environment Admin role for the environments and the Environment Creator role at the tenant level.
To delegate environment creation and management without full admin rights, the administrator should assign the Environment Creator role at the tenant level and Environment Admin roles for the specific environments. This combination provides the necessary permissions while adhering to least privilege, as the user cannot manage unrelated environments or tenant-wide policies.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Assign the Environment Admin role for the environments and the Environment Creator role at the tenant level.
Why this is correct
Combining the Environment Creator role at the tenant level with Environment Admin roles for specific environments allows the user to create new environments and manage the ones they are responsible for. This follows least privilege because the user does not receive full Power Platform Administrator rights but can still perform the required tasks.
- ✗
Assign the Environment Admin role for each environment the user should manage.
Why it's wrong here
The Environment Admin role allows managing a specific environment, but it does not grant the ability to create new environments. The requirement includes creating environments, so this role alone is insufficient. The administrator would need to combine it with another role or use a different approach to allow environment creation.
- ✗
Assign the Power Platform Administrator role to the user in Microsoft Entra ID.
Why it's wrong here
The Power Platform Administrator role grants broad privileges across the tenant, including managing all environments, policies, and settings. This exceeds the requirement of delegating only environment creation and management. It violates least privilege because the user would have more permissions than necessary. A more limited role is needed.
- ✗
Assign the Environment Creator role in the Power Platform admin center.
Why it's wrong here
The Environment Creator role allows users to create environments, but it does not grant management rights over all environments. The requirement includes managing environments, which may involve editing settings or deleting environments. This role alone does not provide the necessary management capabilities, so it falls short of the full delegation needed.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PL-900 question from scratch — 701 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.