Microsoft PL-400 Based on Real Exam Environment

Box 1: Field level security

Only supervisors must be able to view phone numbers in the Accounts form.

You use field security tables to apply field-level security, which restricts field access to specified users and teams. The scope of field-level security is global, which means that it applies to all records within the organization, regardless of the business unit hierarchical level to which the record or the user belongs. Field security works in all Microsoft Dataverse clients, including the Web client, Dynamics 365 for Outlook, and Dynamics. It applies to all components, such as the Dataverse web services, reports, search, offline, filtered views, auditing, and duplicate detection.

Box 2: Team Security

Sales users must only have access to their own records.

Owner team: An owner team owns records and has security roles assigned to the team. A user ' s privileges can come from their individual security roles, those of the teams that they ' re part of or the ones they inherit. A team has full access rights on the records that the team owns. Team members are added manually to the owner team.

Box 3: Environment security

Developers must be able to create new apps for all users.

Environment maker: Can create new resources associated with an environment, including apps, connections, custom APIs, gateways, and flows using Microsoft Power Automate. However, this role doesn ' t have any privileges to access data within an environment.

When you export a managed solution, it contains all the changes that have been applied for that solution into a file that you can then import into a different Dataverse environment.

Box 1: Common Data Service User

UserA must be able to create and publish PowerApps apps.

Common Data Service directly against your core business data already used within Dynamics 365 without the need for integration.

Build Apps against your Dynamics 365 Data

Manage reusable Business logic and rules

Reusable skills across Dynamics 365 and Power Apps

Box 2: Environment Maker

UserB must be the owner of all the systems and be able to provide permissions and create all new environments.

The Environment Maker role can create resources within an environment including apps, connections, custom connectors, gateways, and flows using Power Automate.

Box 3: System Administrator

UserC must be able to create apps connected to the systems and update the security roles and entities.

System Administrator is the highest level role which encompasses all the privileges and has over-riding rights. The System Administrator has the authority to allow and remove access of other users and define the extent of their rights. For example, the System Administrator and the System Customizer are given access to custom entities by default while all other users need to be given access. This is the only role that cannot be edited.

Box 4: System Customizer

End users must have minimum access to the required systems.

Sales users must only have access to their own records.

The System Customizer role is similar to the System Administrator role which enables non-system administrators to customize Dynamics 365. A Customizer is a user who customizes entities, attributes and relationships.