PL-900 Model-driven app sharing with security groups Practice Question
You are a Power Apps developer at Contoso Ltd. The company uses Microsoft 365 E5 licenses and has a complex environment with multiple departments. The HR department needs a canvas app to manage employee onboarding. The app must connect to a SharePoint Online list containing employee records, and also to the Microsoft Graph API to retrieve manager information. The app should be accessible to HR staff only, who are in a security group named 'HR-Staff'. You need to design the app to ensure data security and minimize licensing costs. The app will be used by 50 HR staff members. You have the following options: A) Create a canvas app using Power Apps, connect to SharePoint via the SharePoint connector and to Microsoft Graph via the HTTP connector with custom authentication. Share the app with the 'HR-Staff' security group. B) Create a model-driven app using Power Apps, connect to SharePoint via the SharePoint connector and to Microsoft Graph via the Microsoft Graph connector provided in Power Apps. Share the app with individual users. C) Create a canvas app using Power Apps, connect to SharePoint via the SharePoint connector and to Microsoft Graph via the HTTP connector with custom authentication. Share the app with individual users. D) Create a model-driven app using Power Apps, connect to SharePoint via the SharePoint connector and to Microsoft Graph via the Microsoft Graph connector provided in Power Apps. Share the app with the 'HR-Staff' security group. Choose the best option.
⚠ Common exam trap
Candidates may be tempted to choose a model-driven app with individual sharing (Option D) thinking that model-driven is sufficient, but the requirement for simplifying access management for 50 users makes sharing with the HR-Staff security group essential. Option C is the best practice.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a model-driven app using Power Apps, connect to SharePoint via the SharePoint connector and to Microsoft Graph via the Microsoft Graph connector provided in Power Apps. Share the app with the 'HR-Staff' security group.
Model-driven apps support sharing with security groups natively, simplifying access management for the 50 HR staff members. The Microsoft Graph connector provided in Power Apps offers a simpler and more secure integration than the HTTP connector with custom authentication. Option C (model-driven app with Microsoft Graph connector and security group sharing) meets both requirements efficiently. Option D (model-driven app with individual sharing) is less efficient for managing 50 users. Option A (canvas app with HTTP connector and individual users) introduces complexity and lacks native group sharing. Option B (canvas app with HTTP connector and security group) requires premium licensing for group sharing and uses a custom connector, increasing cost and complexity.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create a canvas app using Power Apps, connect to SharePoint via the SharePoint connector and to Microsoft Graph via the HTTP connector with custom authentication. Share the app with individual users.
Why it's wrong here
Incorrect. Sharing with individual users is inefficient for 50 users, and the HTTP connector with custom authentication adds unnecessary complexity and security risks.
- ✗
Create a canvas app using Power Apps, connect to SharePoint via the SharePoint connector and to Microsoft Graph via the HTTP connector with custom authentication. Share the app with the 'HR-Staff' security group.
Why it's wrong here
Incorrect. While sharing with a security group is good, using a canvas app with the HTTP connector is still complex; the Microsoft Graph connector is not available for canvas apps, so a model-driven app is better.
- ✓
Create a model-driven app using Power Apps, connect to SharePoint via the SharePoint connector and to Microsoft Graph via the Microsoft Graph connector provided in Power Apps. Share the app with the 'HR-Staff' security group.
Why this is correct
Incorrect. This is a canvas app with HTTP connector and individual user sharing, which is inefficient and complex. The Microsoft Graph connector is not used.
- ✗
Create a model-driven app using Power Apps, connect to SharePoint via the SharePoint connector and to Microsoft Graph via the Microsoft Graph connector provided in Power Apps. Share the app with individual users.
Why it's wrong here
Correct. Model-driven app with native security group sharing and the Microsoft Graph connector provides a simple, secure, and cost-effective solution.
Go deeper
Related to this question
About these practice questions
One of 904 original PL-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.