An organization is building a model-driven app on Dataverse. They need to ensure that only managers can delete records, and all other users can only edit them. What should be configured?
Security roles control create, read, write, delete, and share permissions.
Why this answer
Custom security roles allow you to define granular permissions for each user or team. By assigning a role with Delete privilege to managers and a role without Delete privilege (but with Write privilege) to other users, you can restrict deletion to managers only. Option A is incorrect because business rules run on the client side and cannot enforce server-side security; they are for business logic validation, not permission control.
Option B is incorrect because Power Automate flows are designed for automation and may not reliably intercept all delete actions, plus they can be bypassed. Option C is incorrect because business process flows guide users through stages but do not control record-level permissions.