Power Pages Site Security Configuration
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You are building a Power Pages site for a supermarket chain. The company plans to have the managers of individual stores use the site. Managers will authenticate on the site each week by using their corporate identity to update stock information for their store. Managers must be able to add and update stock information for their store only. You need to configure the site security. Solution: Use Microsoft Entra ID authentication. Does the solution meet the goal?
Community Votes
69% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The question tests the trap of confusing Authentication (who you are) with Authorization (what you can do). The common error is assuming identity verification automatically implies permission scoping.
This PL-200 question evaluates the distinction between authentication and authorization in Microsoft Power Pages. It establishes that while Entra ID handles login, it does not inherently enforce data-level access restrictions.
Candidates choose 'Yes' because they focus solely on the secure login aspect, failing to realize that Entra ID alone does not restrict users to their specific store's data without additional configuration.
Community Discussion (6 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
The solution fails to meet the goal because it addresses only authentication, not authorization. While Microsoft Entra ID verifies the managers' corporate identities, it does not define the permissions required to limit them to updating stock information for their specific stores only. To achieve the stated security goal, you must configure a security profile and assign appropriate record-level permissions based on business units or teams.Why the Other Options Are Wrong
Option A is incorrect because simply authenticating users does not grant them specific data access rights. Without explicit authorization rules, authenticated users might have broader access than intended or no structured access at all depending on default settings. The solution provided is incomplete for the requirement of restricting actions to specific records.Community Comment Notes
Community feedback highlights this exact distinction. One commenter noted, "The scenario is not about Authentication. It's about Authorization," emphasizing that login is just the first step. Another user pointed out that fine-grained control requires more than just the identity platform, stating, "Fine-grained access control can be implemented using Microsoft Entra ID groups" but noting that the option didn't specify these configurations. The consensus among those who chose correctly was that the answer was insufficient as written.Official Reference
Exam Strategy
Always distinguish between Authentication (login) and Authorization (permissions). If a solution mentions only logging in but asks for specific data access or role-based restrictions, the answer is likely 'No' unless it explicitly mentions security profiles or permissions.
Frequently Asked Questions
Why isn't Entra ID enough for Power Pages security?
Entra ID only handles authentication (verifying identity). It does not handle authorization (permissions), which is needed to restrict users to specific store data.
How do I restrict users to specific stores in Power Pages?
You must create Security Profiles and assign them to Teams or Users, then configure record-level permissions to limit access to specific business units or records.