PL-900 Practice Question: Manage the Microsoft Power Platform environment
A Power Platform administrator needs to manage user access to a specific environment. The administrator wants to allow a group of users to create apps and flows in that environment, but restrict them from modifying environment settings or managing other users. Which two actions should the administrator perform? (Choose two.)
⚠ Common exam trap
A common mix-up: candidates confuse the Environment Maker role with the Environment Admin role; the Maker role allows creation but not management, which is exactly what is needed.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Add the users to the environment's Maker security group (if using security groups).
To allow users to create apps and flows without granting administrative rights, the administrator should assign the Environment Maker role. This can be done directly or by adding users to the environment's Maker security group if security groups are used. These actions provide the necessary creation permissions while adhering to least privilege, unlike Environment Admin or tenant-level roles.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Assign the Environment Admin role to the group of users for the environment.
Why it's wrong here
The Environment Admin role provides full administrative control over the environment, including modifying settings and managing user access. This would grant more permissions than required and is not suitable for users who should only create apps and flows. It violates the principle of least privilege.
- ✓
Add the users to the environment's Maker security group (if using security groups).
Why this is correct
If the environment is configured to use security groups, adding users to the Maker security group grants them the Environment Maker role, enabling them to create apps and flows. This is a valid method to assign the appropriate permissions without granting administrative rights.
- ✓
Assign the Environment Maker role to the group of users for the environment.
Why this is correct
The Environment Maker role grants users the ability to create apps, flows, and other resources within an environment. It does not include permissions to modify environment settings or manage other users, which aligns with the requirement to allow creation while restricting administrative actions.
- ✗
Assign the Power Platform Administrator role to the group of users.
Why it's wrong here
The Power Platform Administrator role is a tenant-level role that grants broad permissions across all environments, including managing settings and users. It is far too permissive and does not meet the requirement to restrict access to a specific environment with limited rights.
- ✗
Ensure the users have the Common Data Service User security role in the environment.
Why it's wrong here
The Common Data Service User role (now Dataverse User) allows users to access and use Dataverse data but does not grant permissions to create apps or flows. It is typically assigned alongside other roles to provide data access, but it alone does not meet the requirement to allow app and flow creation.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PL-900 question from scratch — 701 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.