PL-900 Practice Question: Manage the Microsoft Power Platform environment
An administrator needs to prevent users from creating Power Apps outside of the approved environment (Production). The company has a Development and a Production environment. Users should only be able to create apps in Development. Which configuration should the administrator use?
⚠ Common exam trap
Candidates often confuse DLP policies with environment-level permissions, incorrectly assuming DLP can block app creation, when in fact DLP only restricts data connectors and sharing, not the ability to create apps.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Assign the Environment Maker role to users only in the Development environment
The Environment Maker role grants permission to create apps within a specific environment. By assigning this role only to the Development environment, users can create apps there but are blocked from creating them in Production, where they lack the role. This directly enforces the requirement without affecting other permissions.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Assign the Environment Maker role to users in both environments
Why it's wrong here
Assigning Environment Maker in both environments grants app-creation rights in Production, directly contradicting the requirement to restrict creation to Development. The role is genuinely for enabling makers to build within a given environment, so it would fit a scenario where users must create apps across multiple environments without restriction.
- ✓
Assign the Environment Maker role to users only in the Development environment
Why this is correct
Environment Maker permits app creation within a given environment. Granting it only in Development means users can build there, while lacking the role in Production prevents them from creating apps in that environment, satisfying the restriction.
- ✗
Create a DLP policy that blocks app creation in Production
Why it's wrong here
DLP policies govern connector and data-flow usage, not where makers may create apps, so blocking Production does not restrict creation there. It is tempting because DLP is the familiar Power Platform governance control, and would be correct for preventing specific connectors from being used together.
- ✗
Remove the Environment Maker role from all users in all environments
Why it's wrong here
Removing Environment Maker everywhere also blocks app creation in Development, where users must retain it. The role governs who may create apps and resources within an environment. It is tempting because revoking it does restrict creation, but the correct approach restricts which environment users can create in, not whether they can create at all.
Go deeper
Related to this question
About these practice questions
This PL-900 question is part of Courseiva's 701-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.