What is the first step to give a new employee access to Microsoft Dataverse?

Create a business unit for the employee

Create a team and add the employee to it

Assign a license in the Dataverse admin center

Create a user record in Dataverse and assign a security role

A company has a hierarchical organizational structure. Managers need to see records owned by their direct reports, but not records owned by employees outside their team. Which security feature should you configure?

Create a security role with Business Unit-level read access and assign it to managers.

Create a business unit for each team and assign the manager to the parent business unit.

Enable hierarchy security and configure the manager field on the user records.

Use column security to grant managers access to the manager field.

Contoso has two divisions, Sales and Marketing, each with its own managers and data. You need to ensure that users in Sales can only see Sales records, while Marketing users can only see Marketing records. Both divisions report to a single VP who must see all records. What should you configure?

Create two teams, one for Sales and one for Marketing, and add users to the teams.

Create two security groups in Microsoft Entra ID and assign users to the groups, then map each group to a security role.

Create two business units, assign users to the respective business units, and create security roles with access levels scoped to the user's business unit.

Create two security roles, one for Sales and one for Marketing, and assign each role to the respective users.

A user at Contoso who previously had access to a sensitive field through a column security profile has been reassigned to a different department. You need to ensure the user can no longer see the sensitive field. What should you do?

Delete the sensitive field from the table.

Remove the user from the column security profile that grants access to the sensitive field.

Change the user's security role to one that does not include read access to the table.

Disable the user's account in Microsoft Entra ID.

Microsoft Certified:Power Platform Functional Consultant Associate

Domain 1Objective 3

Configure Security Settings PL-200 Practice Questions (Page 5)

Part of the Configure Microsoft Dataverse domain, which accounts for 25–30% of the PL-200 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–7 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

9concepts

25–30%of the exam

Questions 21–25

21foundation · easy
What is the first step to give a new employee access to Microsoft Dataverse?
Select an answer first
22application · medium
A company has a hierarchical organizational structure. Managers need to see records owned by their direct reports, but not records owned by employees outside their team. Which security feature should you configure?
Select an answer first
23foundation · easy
What must you create to implement column-level security?
Select an answer first
24application · medium
Contoso has two divisions, Sales and Marketing, each with its own managers and data. You need to ensure that users in Sales can only see Sales records, while Marketing users can only see Marketing records. Both divisions report to a single VP who must see all records. What should you configure?
Select an answer first
25application · medium
A user at Contoso who previously had access to a sensitive field through a column security profile has been reassigned to a different department. You need to ensure the user can no longer see the sensitive field. What should you do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PL-200

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “PL-200” is a trademark of its owner, used for identification only.