PL-600 practice question 2 of 30

A multinational corporation is deploying a Microsoft Power Platform solution to manage its sales processes across the following regions: North…

Choose your answer, then check it against the explanation.

Domain Architect a solution

A multinational corporation is deploying a Microsoft Power Platform solution to manage its sales processes across the following regions: North America, Europe, and Asia. Each region operates independently but reports to a global headquarters. The company has several business units that correspond to each region. Within each business unit ate multiple teams based on countries/regions. Company employees have the following requirements: • Sales representatives must have access only to data relevant to their specific country/region. • Regional managers must be able to view and manage data across all areas within their region. • Some global analysts require read-only access to sales data across the corporation by using third- party tools. • External contractors need limited access to the system to input their progress. You need to design a solution for the company. What should you do?

Answer options

Correct Answer:

Explanation

The company's hierarchical structure (Global > Region > Country) is best modeled using the business unit hierarchy in Microsoft Dataverse. By creating a parent business unit for each region and child business units for the countries within them, data can be effectively segregated. Sales representatives can be assigned to their specific country's business unit with a security role granting 'Business Unit' level access. Regional managers can be placed in the parent regional business unit with a role granting 'Parent: Child Business Units' access, allowing them to view data across their entire region. This foundational structure is the most appropriate and scalable way to meet the core security requirements.

Why Incorrect

A. This addresses specific requirements for external users and applications but fails to establish the fundamental hierarchical security model needed for internal sales staff and managers.

B. Manual record sharing is not a scalable, auditable, or secure method for a large enterprise. It creates an unmanageable system prone to human error and security breaches.

C. This directly contradicts the stated requirement. Giving sales representatives organization-level access violates the principle of least privilege, as they would see all data, not just their own region's.

References

1. Microsoft Learn. "Security concepts in Microsoft Dataverse." Microsoft Power Platform admin documentation. This document explains that business units are a core security modeling component used to segregate data based on an organization's structure. It details the 'Parent: Child Business Units' access level, which is essential for the regional manager requirement. (See section: "Business units" and "Access levels").

2. Microsoft Learn. "Create or edit business units." Microsoft Power Platform admin documentation. This guide states, "You can create business units to model your organization's business and security structure," confirming that this is the intended mechanism for the scenario described. (See section: "Create a business unit").

3. Microsoft Learn. "Security roles and privileges." Microsoft Power Platform admin documentation. This resource clarifies how access levels (User, Business Unit, Parent: Child BU, Organization) work in conjunction with security roles to control data visibility, reinforcing that the business unit structure is the prerequisite for applying these roles correctly. (See section: "Access levels").

Question 2 of 30

Keep practicing

Take the free PL-600 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test