hardMultiple Choice
PL-900 Practice Question: Designing a Power Pages site for a non-profit…
You are designing a Power Pages site for a non-profit organization. The site will have multiple sections, each managed by different departments. The IT department wants to ensure that only authorized users can edit the site's content. Which approach should you recommend?
⚠ Common exam trap
PL-900 often tests whether candidates confuse authentication (Entra ID groups) with authorization (web roles) — the trap is picking Entra ID groups as the answer when the question is really about granting editing permissions inside Power Pages.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create web roles in Power Pages and assign users to those roles to grant editing permissions.
Power Pages uses web roles to control what authenticated users can see and do on the site, including content editing via the Portal Management app or front-end editing features. Assigning users to a web role that has the appropriate table permissions and content-editing privileges is the native, supported way to grant editing access to specific departments. This provides granular, role-based control without over-privileging users.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Implement a custom approval workflow using Power Automate.
Why it's wrong here
Power Automate approval flows route records through approvers; they do not gate who may edit Power Pages content, so unauthorised editors remain unrestricted. It is tempting because approval workflows genuinely suit document or record sign-off processes, yet content authorisation here is enforced through web roles and table permissions.
- ✗
Provide all department heads with administrative access to the Power Pages admin center.
Why it's wrong here
Admin centre access grants environment-wide configuration rights, not scoped editing of individual site sections, so every department head could alter unrelated content. It is tempting because administrators can edit content, but the requirement is least-privilege delegation, which web roles assigned per section deliver instead.
- ✗
Use Microsoft Entra ID groups to grant access to the site's editing features.
Why it's wrong here
Microsoft Entra ID groups authenticate users but do not by themselves authorise Power Pages content editing; that requires web roles mapped to those groups plus table permissions. It is tempting because Entra ID groups are the natural identity container, yet without web role assignment they grant no portal editing rights.
- ✓
Create web roles in Power Pages and assign users to those roles to grant editing permissions.
Why this is correct
Web roles in Power Pages define granular content-editing permissions per site section, satisfying the IT department's requirement that only authorised users modify content. Assigning departmental users to appropriate web roles restricts editing to authenticated individuals, unlike anonymous access. This directly enforces authorisation without relying on Microsoft Entra ID security group membership alone.
Go deeper
Related to this question
About these practice questions
This PL-900 question is part of Courseiva's 701-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.