PL-900 Practice Question: Manage the Microsoft Power Platform environment
A Power Platform administrator needs to ensure that only certain users can create Power Apps in the 'Production' environment. What is the recommended approach?
⚠ Common exam trap
A common mix-up: candidates confuse tenant-wide settings (like DLP policies or Entra ID roles) with environment-specific security roles, leading them to choose options that either apply too broadly or are technically incapable of controlling app creation permissions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Assign a custom security role in Dataverse that excludes 'Create App' privilege for the Production environment
The recommended approach to restrict app creation to specific users in a specific environment is to assign a custom security role in Dataverse that excludes the 'Create App' privilege for that environment. This leverages Dataverse's role-based security model, which allows granular control over actions like app creation at the environment level, without affecting other environments or tenant-wide settings.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create a DLP policy that blocks app creation for unauthorized users
Why it's wrong here
DLP policies control connector usage, not app creation.
- ✗
Disable 'Create apps' in the Power Platform admin center for the tenant
Why it's wrong here
This would affect all environments.
- ✗
Use Microsoft Entra ID to create a role that blocks 'Create Apps'
Why it's wrong here
Entra ID does not have a 'Create Apps' permission.
- ✓
Assign a custom security role in Dataverse that excludes 'Create App' privilege for the Production environment
Why this is correct
Custom security roles can control app creation at the environment level.
Go deeper
Related to this question
About these practice questions
One of 904 original PL-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.