Free Microsoft Dynamics MB-230 Actual Exam Questions - Question 10 Discussion
A customer service supervisor must create canvas apps. The environment uses a Microsoft Dataverse
database. The supervisor must be able to create new connections and Microsoft Power Automate
flows. The supervisor must not have data access privileges to data in the environment.
You need to assign a role to the supervisor by using the principle of least privilege.
Which security role should you grant to the supervisor?
It’s A—System Customizer and Admin roles definitely give too much data access.
B imo, because System Customizer lets you work on app customizations without broad data access, and might allow creating flows and connections too, without full admin rights. It’s less risky than giving Environment Admin or System Admin.
Guessing A since it lets you build apps and flows but limits data access well.
It’s A. Environment Maker is designed exactly for this use case—creating canvas apps and flows plus managing connections without giving data access. System Customizer and Admin roles have way too many privileges, including data access or environment-wide controls, which breaks the least privilege principle. So A fits best for allowing the supervisor to build and automate but keeps data secure.
It’s A for me too. Environment Maker lets you create apps and flows and manage connections without granting full data rights or admin privileges. System Customizer and Admin roles both have way more access than needed, which breaks the least privilege rule. This role perfectly fits what the supervisor needs without opening up data access.
Probably B here, since System Customizer can create and manage app components without broader data access, which might fit the least privilege rule better than giving full environment permissions.
A imo, because Environment Maker lets them build apps and flows but keeps data access off limits, which matches the least privilege requirement perfectly.
Maybe A works best since Environment Maker lets you build apps and flows but doesn’t grant full data access or admin-level privileges, fitting the least privilege rule here.
This one’s gotta be A. Environment Maker because it lets them create apps and flows without giving full data access or admin rights.