Restricting SharePoint Document Access in Dynamics 365 Sales

Configure supporting apps and services

A company uses Microsoft SharePoint document management in Dynamics 365 Sales to store contracts. The company wants only the contracts team to have access to the documents. The contracts team has a custom security role. You need to restrict privileges to secure the documents. What should you do?

Update the users list in the SharePoint site.
Create a new group in the SharePoint site. Correct Answer
Create a new security role in Dynamics 365 Sales.
Update privileges in the Dynamics 365 Sales security role of the contract team.

Answer Correct answer: B — Create a new group in the SharePoint site to manage access permissions for the contracts team, as SharePoint uses its own independent security model separate from Dynamics 365.

Community Insight

The exam tests the understanding that Dynamics 365 and SharePoint have independent security models; D365 roles do not automatically control file-level permissions in SharePoint.

This question addresses securing Microsoft SharePoint documents linked to Dynamics 365 Sales by leveraging SharePoint's native security model. The correct approach involves creating a new group in the SharePoint site to manage access for the contracts team.

Many learners incorrectly choose to update privileges in the Dynamics 365 Sales security role, failing to realize that D365 roles only control application functionality, not external file storage access.

Community Discussion (2 comments)

tdatda 👍 1 Selected: A

To secure the documents, you should update the users list or permissions in the SharePoint site where the documents are stored. Why This Action is Necessary • Separate Security Models: Dynamics 365 Sales and Microsoft SharePoint use completely independent security models. • Role Limitation: Updating privileges in a Dynamics 365 security role does not control or restrict access to files stored inside SharePoint. • Permission Management: You must configure permissions directly on the SharePoint site, document library, or folder to ensure only the contracts team has access.

Shaiii102500 👍 1 Selected: B

The correct answer is B. Create a new group in the SharePoint site. ✅ Why B? The contracts are stored in SharePoint, so access to the actual documents must be secured using SharePoint permissions The reason B is the better exam answer is the scenario says access must be restricted to the contracts team, meaning the requirement is group-based rather than individual-user-based. A. Update the users list: You could grant/revoke permissions user by user, but this is individual permission management. B. Create a new SharePoint group: A SharePoint group is specifically designed to collect users who require the same permissions to sites and content. Microsoft recommends groups rather than assigning the same permissions one person at a time.

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Expert Analysis

Why the Answer Is Correct

The correct answer is B: Create a new group in the SharePoint site. Since the documents are stored in SharePoint, access must be managed through SharePoint's permission system. Creating a new SharePoint group allows you to assign specific permissions (e.g., Read/Contribute) to the contracts team, effectively restricting access to only those authorized users. This aligns with the principle of least privilege for file storage.

Why the Other Options Are Wrong

Option A (Update the users list) is less scalable and harder to maintain than using groups, especially if team membership changes. Options C and D involve modifying Dynamics 365 Security Roles. While D365 roles control user access to entities like Accounts or Opportunities within the CRM, they do not propagate permissions to the underlying SharePoint document library where the actual files reside. Changing D365 roles would not restrict access to the SharePoint documents themselves.

Community Comment Notes

Community comments highlight the separation of security models. As tdatda noted, "Dynamics 365 Sales and Microsoft SharePoint use completely independent security models," emphasizing that D365 role updates do not affect SharePoint file access. Shaiii102500 reinforced this by stating that access to actual documents must be secured using SharePoint permissions, making group creation the appropriate administrative action.

Exam Strategy

Always identify the storage location of data when questions mention integration between Dynamics 365 and external services like SharePoint or OneDrive. If the data is in SharePoint, apply SharePoint security policies (groups/lists), not Dynamics 365 security roles.

Frequently Asked Questions

Why don't Dynamics 365 security roles control SharePoint access?

Dynamics 365 and SharePoint operate on separate security architectures. D365 roles manage app-level entity access, while SharePoint manages file-level permissions via its own groups and lists.

Is updating the users list better than creating a group?

No. Using a SharePoint group is best practice because it simplifies management. Adding/removing users from a group is easier than updating individual user permissions for every document or folder.

More AB-210 FAQ →

Related Analysis

Practice All AB-210 Questions

Access 100 questions with complete answers and detailed explanations.

View Full AB-210 Practice Test →

← Back to AB-210 Study Guide