You are creating an integration that uses an Azure function to create records in the Common Data Service when leads are submitted from your company website.
You create a user and grant the user the Basic User security role.
You do not have administrator access to the environment you are using or access to Azure Active Directory. Company policy dictates that service accounts must be used for integrations, and integrations must not be granted privileges beyond what is needed.
You need to recommend actions that an administrator should perform to configure access for the Azure Function.
Which three actions should you perform? Each correct selection presents part of the solution.
NOTE: Each correct selection is worth one point.

A. Create an application registration in Azure Active Directory.

B. Assign the system administrator security role to the application user.

C. Assign the Power Platform administrator role to the application user in Azure Active Directory.

D. Create a new security role with the minimum required permissions and assign to the application user.

E. Grant the application delegated permissions to the Dynamics CRM API in Azure Active Directory.

F. Deploy Azure B2B guest permissions to the application user.




 

Suggested Answer: ADE

A: Registering an application with Azure Active Directory, enables a user with Power Apps user account to connect to their Microsoft Dataverse environment from external client applications using OAuth authentication.
D: Use minimum permissions.
E: In the application registration process you delegate permissions to the Dynamics CRM API in Azure Active Directory.
 
Incorrect:
Not B: The system administrator security role would give the user too much privileges.
Not C: The Power Platform administrator role would give the user too much privileges.
Reference: alt="Reference Image" />
Incorrect:
Not B: The system administrator security role would give the user too much privileges.
Not C: The Power Platform administrator role would give the user too much privileges.
Reference:
https://docs.microsoft.com/en-us/powerapps/developer/common-data-service/walkthrough-register-app-azure-active-directory

This question is in PL-400 Microsoft Power Platform Developer Exam
For getting Microsoft Certified: Power Platform Developer Associate Certificate




Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Microsoft. 
The website does not contain actual questions and answers from Microsoft's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to Microsoft.