For an AppSource app, enable the CodeCop, UICop, and AppSourceCop code analyzers in settings.json and avoid adding PerTenantExtensionCop

MB-820 By islever Editorial Last updated

Describe the essential development standards

Short answer

ABE For an AppSource app use CodeCop, UICop, and AppSourceCop; do not add PerTenantExtensionCop because it conflicts with AppSourceCop.

Question

You are developing an app that will be published to Microsoft AppSource. The app requires code analyzers to enforce some rules. You plan to add the analyzers to the settings.json file. You need to activate the analyzers for the project. Which three code analyzers should you activate to develop the app for AppSource? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
  1. CodeCop Correct Answer
  2. UICop Correct Answer
  3. a custom rule set
  4. PerTenantExtensionCop
  5. AppSourceCop Correct Answer

Key Takeaways

You enable analyzers in the al.codeAnalyzers setting in settings.json, not by writing a custom rule set. Enabling both PerTenantExtensionCop and AppSourceCop for the same project is invalid.

When building an app for Microsoft AppSource, the required code analyzers are CodeCop (general AL coding guidelines), UICop (web client UI rules), and AppSourceCop (marketplace submission rules). PerTenantExtensionCop is for per-tenant extensions and conflicts with AppSourceCop, so you enable only one of them.

Common mistake: Do not select a custom rule set as one of the three built-in analyzers, and do not mix PerTenantExtensionCop with AppSourceCop. Choose the analyzer that matches your deployment target.

Expert Analysis

Why the Answer Is Correct

Option A (CodeCop), Option B (UICop), and Option E (AppSourceCop) are the three analyzers that must be activated for an AppSource app, as confirmed by the 94 community votes and the official code-analysis documentation. These analyzers enforce the AL coding guidelines, UI best practices, and AppSource submission rules respectively. The scenario explicitly targets an AppSource-published app, so AppSourceCop is mandatory.

Why the Other Options Are Wrong

Option C (a custom rule set) is not one of the three built-in analyzers; analyzers are enabled via the al.codeAnalyzers setting, not a custom ruleset entry. Option D (PerTenantExtensionCop) enforces rules for per-tenant extensions and conflicts with AppSourceCop, so it must not be enabled alongside AppSourceCop for a marketplace app. The official guidance is to enable either PerTenantExtensionCop or AppSourceCop based on the deployment target, never both.

Community Comment Notes

VPin explains that PerTenantExtensionCop and AppSourceCop conflict and that for AppSource you do not need PerTenantExtensionCop, and 5e11cb9 confirms A, B, E as the answer.

Official Reference

https://learn.microsoft.com/en-us/dynamics365/business-central/dev-itpro/developer/devenv-using-code-analysis-tool

This link opens the official vendor documentation in a new tab.

Community Votes

ABE
100%

100% of anonymous learners picked answer ABE. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 4 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 4

  1. VPin 👍 15
    PerTenantExtensionCop and AppSourceCop conflicts with each other. Code is for Appsource, so no need for PerTenantExtensionCop.
  2. 5e11cb9 👍 3
    Correct answer should be A, B, E
  3. javieroto 👍 1
    PerTenantExtensionCop is an analyzer that enforces rules that must be respected by extensions meant to be installed for individual tenants.
  4. Rebe 👍 1
    correct anser is ABE

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Snapshot debugging only fires on the next session of the configured user, so a session that never occurs means debugging never starts

S-grade

Use Get-BcArtifactUrl with -select Current to pull the most recent Business Central artifact URL when setting up a local development Docker container

S-grade

Adding InherentPermissions = 'RI' to a table object grants Read and Insert permissions and resolves permission errors, blocked posting, and list-page access without a new permission set

S-grade

On a Role Center page, define the navigation bar (second-level navigation) in the area(Embedding) to link to other pages

S-grade

← Back to MB-820 Study Guide