Discuss Microsoft PL-400 Exam Topic 4 Question 8

You are creating an integration that uses an Azure function to create records in the Common Data Service when leads are submitted from your company website.

You create and configure a Common Data Service application user.

You do not have administrator access to the Common Data Service environment you are using for access to Azure Active Directory. Company policy dictates that service accounts must be used for integrations, and integrations must not be granted privileges beyond what is needed.

You need to recommend actions that an administrator should perform to configure access for the Azure Function.

Which three actions should you perform? Each correct selection presents part of the solution.

NOTE: Each correct selection is worth one point.

ACreate an application registration in Azure Active Directory.

BAssign the system administrator security role to the application user.

CAssign the Power Platform administrator role to the application user in Azure Active Directory.

DCreate a new security role with the minimum required permissions and assign to the application user.

EGrant the application delegated permissions to the Dynamics CRM API in Azure Active Directory.

FDeploy Azure B2B guest permissions to the application user.

Suggested Answer: A, D, E

https://docs.microsoft.com/en-us/powerapps/developer/common-data-service/walkthrough-register-app-azureactive-directory

Get Premium PL-400 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Tony 12 months ago

C is a must if we want to manage Power Platform effectively.

Malinda 1 year ago

Wait, can we really use E for this? Sounds off.

Terina 1 year ago

B seems too much, we shouldn't give admin rights.

Vesta 1 year ago

I think D is the best option here!

Marjory 1 year ago

A is definitely needed for access.

Ryann 1 year ago

I feel like we practiced a similar question where we had to create a security role with minimum permissions. That might be the right approach here too.

Margot 1 year ago

I'm not entirely sure, but I think assigning the system administrator role might be too much access for the application user. We should stick to the principle of least privilege.

Lizette 1 year ago

I remember we discussed the importance of creating an application registration in Azure Active Directory for integrations like this. That seems like a solid choice.

Jules 1 year ago

Granting delegated permissions to the Dynamics CRM API sounds familiar, but I can't recall if that's necessary for this specific integration.

Felix 1 year ago

Hmm, I'm a bit confused by all the different options here. I'll need to think through each one carefully to understand how they might work in practice. Maybe I'll start by focusing on the requirement to have the pricing tied to the territory.

Ressie 1 year ago

I'm a little confused on the differences between the load balancer types. I'll need to review the key features of each one to determine the best fit for a VOIP application.

Chuck 1 year ago

Okay, I think I've got this. The key is that we want to attach the entire "Market Trends" email, not just the files. So I'm going to go with option B and use the Outlook Item button to attach the full email message.

Microsoft PL-400 Exam - Topic 4 Question 8 Discussion