Power Pages Security Configuration for Store Managers

PL-200 By islever Editorial Last updated

Short answer

A Configuring table permissions allows you to control access to Dataverse records based on user roles, ensuring managers can only update their specific store's stock information.

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You are building a Power Pages site for a supermarket chain. The company plans to have the managers of individual stores use the site. Managers will authenticate on the site each week by using their corporate identity to update stock information for their store. Managers must be able to add and update stock information for their store only. You need to configure the site security. Solution: Configure table permissions. Does the solution meet the goal?
  1. Yes Correct Answer
  2. No

Key Takeaways

The trap is assuming web roles alone are sufficient; however, table permissions are the mechanism that actually enforces record-level restrictions in Power Pages.

This question tests the correct configuration of security for a Power Pages site using table permissions. The solution meets the goal because table permissions restrict access to specific Dataverse records based on roles.

Common mistake: Many learners select 'No' (Option B), mistakenly believing that configuring table permissions is insufficient without explicitly mentioning web roles, or they overlook that table permissions are the primary control for data access.

Expert Analysis

Why the Answer Is Correct

Configuring table permissions is the correct and necessary step to meet the stated goals. In Microsoft Power Pages, table permissions are used to define which users can read, write, create, or delete records in Dataverse tables. By associating these permissions with the appropriate web roles (which represent the store managers), you ensure that each manager can only access and modify stock information relevant to their own store.

Why the Other Options Are Wrong

Selecting 'No' implies that table permissions cannot achieve this goal. However, while web roles are required to group users, it is the table permissions that enforce the actual data boundaries (record-level security). Without table permissions, there is no restriction on what data a user can view or edit, regardless of their role.

Community Comment Notes

The community is divided, but the most accurate comments support the 'Yes' verdict. One commenter correctly noted that table permissions allow control over access based on user roles. Another highlighted that access to Dataverse records is automatically restricted when using forms and lists, provided table permissions are configured. Comments suggesting 'No' often confuse the requirement of having both roles and permissions, missing the fact that the solution presented is the valid method to secure the data.

Official Reference

https://learn.microsoft.com/en-us/power-pages/security/power-pages-security

This link opens the official vendor documentation in a new tab.

Exam Strategy

When evaluating security configurations in Power Pages, always look for 'table permissions' as the key component for record-level access control. Remember that while roles identify who the user is, permissions define what they can do with specific data.

Frequently Asked Questions

Why is Option B incorrect in this scenario?

Option B is incorrect because table permissions are indeed the correct mechanism to enforce record-level security in Power Pages.

Do I need web roles if I have table permissions?

Yes, table permissions must be associated with web roles to apply the restrictions to the specific users (managers).

More PL-200 FAQ →

Community Votes

B
60%
A
40%

60% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 7 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 7

  1. 52f8a31 👍 2 Answered B
    https://learn.microsoft.com/fr-fr/power-pages/security/power-pages-security
  2. businesselements1 👍 1
    -YES-Access to Dataverse records is automatically restricted in Power Pages when using forms, lists, Liquid, the Portals Web API, and other components accessing Dataverse tables. To allow access to Dataverse records in Power Pages sites, you'll need to configure table permissions and associate the table permissions to web roles. ==> Global access - Applies the selected table permission and privileges to the users from the selected roles for all records. Contact access - Applies the selected table permission and privileges to the users from the selected role associated to the signed-in user. Account access - Applies the selected table permission and privileges to the users from the selected role associated to the signed-in user's account. Self access - Applies the selected table permission and privileges to the users from the selected role for only their own Contact record. https://learn.microsoft.com/en-us/power-pages/security/table-permissions
  3. killionb12 👍 1 Answered A
    Yes, configuring table permissions does meet the goal (Option A). Table permissions in Power Pages allow you to control access to Dataverse records based on user roles. By configuring table permissions, you can ensure that managers can only add and update stock information for their specific store
  4. 91e9a8d 👍 1 Answered A
    Should be yes. And under the Access Type, select “Contact access”.
  5. stylist 👍 1 Answered B
    It cannot be a solution as web roles are required so no.
Show 2 more comments
  1. plexampractice 👍 1
    No - you need to create a security role.
  2. Sebetha_M 👍 3
    Should be Yes

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

How Do You Lock a Power Pages Chatbot to Entra ID Users?

S-grade

Preventing Table Display Name Changes in UAT

S-grade

Minimizing Dataverse Storage with SharePoint Integration

S-grade

Power Apps Environment Variable Resolution in Managed Solutions

S-grade

← Back to PL-200 Study Guide