You have a model-driven app that is shared with a Microsoft Entra ID group. The group has a security role assigned. A new user is added to the group, but they cannot access the app. What should you check first?

Whether the user's Entra ID group membership has propagated to Dataverse

Whether the user has been assigned a security role directly in Dataverse

Whether the app is shared with the user individually

Whether the user has a column security profile

A user reports they can view a specific account record but cannot edit it. The user is a member of an access team that has been shared the account record with 'Read' access. The user also has a security role that grants 'Write' privilege on the Account entity at the 'User' level. What is the most likely reason the user cannot edit the record?

The access team share only grants 'Read' access, which overrides the user's role-based write privilege

The user's security role does not include 'Write' privilege at the 'User' level

The user's hierarchy security position prevents editing

The user is not the owner of the record

A multinational company has a sales team that operates across multiple business units. The team needs to own and manage opportunities in several business units, but the team members should only see opportunities they personally own, not all team-owned opportunities. The company also wants to use Microsoft Entra ID groups to manage team membership. You need to design a security model that meets these requirements. What should you do?

Create a single owner team in the root business unit and assign a security role with read access at 'Business Unit' level.

Create a single owner team in the root business unit and assign a security role with read access at 'User' level.

Create an access team for each business unit and share the opportunities with the team.

Create an owner team in each business unit, add the same Entra ID group to each team, and assign a security role with read access at 'User' level to each team.

Your organization has a hierarchical structure where managers should see records owned by their direct reports, but not records owned by other managers' teams. You have enabled hierarchy security. What must you configure to ensure managers see only their direct reports' records?

Set the hierarchy security model to 'Depth' and configure the appropriate depth

Share each manager's records with their direct reports

Create an access team for each manager and add their direct reports

Assign the 'Manager' security role to all managers

Microsoft Certified:Dynamics 365 Customer Experience Analyst Associate

Domain 2Objective 5

Manage Security MB-280 Practice Questions (Page 1)

Part of the Configure and customize Dataverse and model-driven apps domain, which accounts for 35–40% of the MB-280 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~14–26 in this domain), expect 3–5 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

10concepts

35–40%of the exam

Questions 1–5

1expert · hard
You have a model-driven app that is shared with a Microsoft Entra ID group. The group has a security role assigned. A new user is added to the group, but they cannot access the app. What should you check first?
Select an answer first
2expert · hard
A user reports they can view a specific account record but cannot edit it. The user is a member of an access team that has been shared the account record with 'Read' access. The user also has a security role that grants 'Write' privilege on the Account entity at the 'User' level. What is the most likely reason the user cannot edit the record?
Select an answer first
3foundation · medium
Which tool in Dataverse is specifically designed to help diagnose why a user cannot access a record?
Select an answer first
4expert · hard
A multinational company has a sales team that operates across multiple business units. The team needs to own and manage opportunities in several business units, but the team members should only see opportunities they personally own, not all team-owned opportunities. The company also wants to use Microsoft Entra ID groups to manage team membership. You need to design a security model that meets these requirements. What should you do?
Select an answer first
5application · medium
Your organization has a hierarchical structure where managers should see records owned by their direct reports, but not records owned by other managers' teams. You have enabled hierarchy security. What must you configure to ensure managers see only their direct reports' records?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MB-280

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MB-280” is a trademark of its owner, used for identification only.

Manage Security MB-280 Practice Questions (Page 1)

Questions 1–5

You have a model-driven app that is shared with a Microsoft Entra ID group. The group has a security role assigned. A new user is added to the group, but they cannot access the app. What should you check first?

Which tool in Dataverse is specifically designed to help diagnose why a user cannot access a record?

Your organization has a hierarchical structure where managers should see records owned by their direct reports, but not records owned by other managers' teams. You have enabled hierarchy security. What must you configure to ensure managers see only their direct reports' records?

Keep studying — Configure and customize Dataverse and model-driven apps